Senior Windows & Cloud Engineer

Tracker South Africa; Johannesburg; On-site; ZAR 900,000 - 1,300,000; Full time

Job summary

Tracker South Africa is seeking a Senior Windows & Cloud Engineer to design, operate and secure enterprise Azure, Entra ID, AD and Windows Server environments from Randburg. You will lead complex incidents, drive hybrid-cloud initiatives and partner with multiple teams to ensure service reliability and security.

The role requires deep expertise in Microsoft technologies, strong problem-solving and stakeholder engagement to support Tracker's evolving technology landscape.

Qualifications

• 7+ years in enterprise infrastructure environments.
• 6+ years of advanced Microsoft Windows Server experience.
• 4+ years of substantial hands-on Microsoft Azure experience.
• Extensive Active Directory, Entra ID, DNS and enterprise networking experience.

Responsibilities

• Design, implement, operate and troubleshoot Azure, Entra ID, AD, Windows Server, DNS and hybrid-cloud infrastructure.
• Own complex production incidents from triage through root-cause analysis, remediation and prevention.
• Lead security remediation with Defender for Cloud and coordinate with external SOC.
• Produce technical designs, deployment plans, risk assessments and operational documentation.

Skills

Azure

Entra ID

Active Directory

Windows Server

Networking

PowerShell

Automation

Education

Degree or Diploma

Azure Solutions Architect Expert

Tools

Terraform

Bicep

ARM templates

Azure CLI

PowerShell

Job description

Are you a highly skilled infrastructure and cloud professional with a passion for designing, managing, and optimizing enterprise technology environments? We are seeking an experienced Senior Windows & Cloud Engineer to join our IT Operations – Cloud & Software team based in Randburg. In this pivotal role, you will provide expert-level technical leadership, engineering excellence, and operational support across Microsoft Azure, Microsoft Entra ID, Active Directory, Windows Server, DNS, enterprise networking, and hybrid cloud platforms. You will be responsible for maintaining the stability, security, and performance of critical infrastructure services while leading the resolution of complex technical incidents and implementing proactive measures to prevent future issues. Working closely with development, network, security, and database teams, as well as technology vendors and business stakeholders, you will play a key role in driving infrastructure modernization, cloud adoption, operational efficiency, and service reliability. The successful candidate will combine deep technical expertise with strong problem-solving, collaboration, and stakeholder engagement skills to support the organisation's evolving technology landscape. This position offers an exciting opportunity to contribute to strategic technology initiatives while ensuring the delivery of secure, resilient, and scalable cloud and infrastructure solutions in a fast-paced and innovative environment.

Cloud, Identity and Core Infrastructure Engineering

• Design, implement, operate and troubleshoot Microsoft Azure, Microsoft Entra ID, Active Directory, Windows Server, DNS and hybrid-cloud infrastructure.
• Engineer Azure compute, networking, storage, governance, monitoring, backup and disaster-recovery services.
• Maintain secure, resilient identity, authentication, directory, server and DNS services across cloud and on-premises environments.
• Experience supporting SharePoint Server on-premises, including farm administration, patching, upgrades, service applications, search services, SQL dependencies, authentication, certificates and infrastructure troubleshooting

Advanced Troubleshooting, Incident Management and Root-Cause Analysis

• Own complex production incidents from triage through evidence-based root-cause analysis, remediation and prevention.
• Correlate application, operating-system, identity, DNS, network, firewall, storage, virtualisation and cloud telemetry.
• Lead P1 / Severity 1 technical bridges, vendor escalations and defensible incident reporting

Networking, Virtualisation, Storage and Infrastructure Security

• Troubleshoot TCP/IP, routing, firewalls, load balancing, VPNs, private connectivity and cross-platform network dependencies.
• Lead Azure security remediation through Microsoft Defender for Cloud, ensuring that identified vulnerabilities, security recommendations and configuration risks are appropriately prioritised and addressed.
• Partner with the external SOC to manage and remediate security exposures, reduce infrastructure risk and improve Tracker’s overall security posture.
• Apply least privilege, hardening, patching, certificate, vulnerability-remediation, audit and change-governance controls

Projects, Architecture and Service Resilience

• Participate in and, where appropriate, lead Azure, datacentre, domain, server, hybrid integration, security and disaster-recovery workstreams.
• Produce technical designs, implementation and rollback plans, risk assessments, architecture diagrams and operational documentation.
• Plan and test backup, recovery, high availability, failover and business-continuity capabilities.

Automation, Monitoring and Technical Leadership

• Automate repetitive operational, diagnostic and remediation tasks using advanced PowerShell and relevant infrastructure-as-code tooling.
• Improve monitoring, alerting, telemetry correlation, capacity planning and cost optimisation.
• Mentor less experienced engineers and communicate complex technical issues clearly to technical and non-technical stakeholders

Qualifications

• Relevant Degree or Diploma or Relevant Work Experience required
• Microsoft Certified: Azure Solutions Architect Expert;
• Identity and Access Administrator Associate; and relevant Microsoft Security certifications

Experience

• Ideally 7 years in enterprise infrastructure environments.
• Ideally 6 years of advanced Microsoft Windows Server experience.
• Ideally 4 years of substantial hands-on Microsoft Azure experience.
• Extensive Active Directory, Microsoft Entra ID, DNS and enterprise networking experience.
• Experience with highly available, business-critical production systems, hybrid cloud, advanced troubleshooting, P1 incidents, root-cause analysis, and formal change-management and governance processes.
• Expert Microsoft Azure, including compute, networking, governance, storage, resilience, monitoring, security, capacity planning, cost optimisation and automation.
• Expert Microsoft Entra ID, identity and authentication, including hybrid identity, SSO, enterprise applications, app registrations, managed identities, Conditional Access, MFA, PIM and Identity Protection.
• Expert Active Directory, including AD DS, replication, Kerberos, NTLM, LDAP/LDAPS, SPNs, trusts, Group Policy, migrations and cross-domain authentication.
• Experience supporting SharePoint Server on-premises, including farm administration, patching, upgrades, service applications, search services, SQL dependencies, authentication, certificates and infrastructure troubleshooting.
• Expert DNS, Windows Server, TCP/IP and enterprise networking, Azure networking and hybrid-cloud infrastructure.
• Expert infrastructure troubleshooting and root-cause analysis, with advanced / expert PowerShell capability
• Advanced infrastructure security, including least privilege, hardening, segmentation, certificate management, patching, vulnerability remediation, audit evidence and change governance.
• Manage Microsoft Defender for Cloud and drive Azure security remediation activities.
• Work closely with the external SOC to remediate identified security exposures and improve Tracker’s overall security posture.
• Exposure to Active Directory Certificate Services, Microsoft Defender for Cloud and Azure security-remediation tooling.
• Monitoring, incident management, backup, recovery, disaster recovery and business continuity
• Experience with infrastructure automation and infrastructure-as-code tools, including Terraform, Bicep, ARM templates, Azure CLI, Azure Automation and PowerShell.