Microsoft Cloud & Infrastructure Manager

About the role

Albawani is seeking a Microsoft Cloud & Infrastructure Manager to lead the design, implementation and operational management of its Microsoft cloud ecosystem. The role will ensure secure, scalable and cost‑effective Azure and Microsoft 365 services that support headquarters and construction sites across Saudi Arabia.

Key responsibilities

• Architect, deploy and manage Azure infrastructure including VMs, networking, storage and security components.
• Design Azure Landing Zones following the Microsoft Cloud Adoption Framework and govern resources through Management Groups, Subscriptions, Resource Groups and RBAC.
• Implement hybrid connectivity with ExpressRoute and Site‑to‑Site VPN, and oversee Azure Backup, Site Recovery and disaster‑recovery solutions.
• Administer the Microsoft 365 tenant – Exchange Online, SharePoint, Teams, OneDrive and Microsoft Entra ID – including user lifecycle, conditional access, MFA and licensing optimization.
• Deploy Intune for endpoint management and configure Microsoft Defender for Endpoint, Office 365 and Cloud Apps security.
• Manage Teams voice services, DLP policies, Microsoft Purview information protection and compliance with NCA Essential Cybersecurity Controls and PDPL.
• Monitor resource utilization, apply FinOps practices and ensure business continuity through cost management and privileged access controls.

Required profile

• Proven experience designing, implementing and operating Azure infrastructure at enterprise scale.
• Strong background in Microsoft 365 administration and security configuration.
• Demonstrated ability to manage hybrid cloud connectivity and disaster‑recovery solutions.

Required skills

• Microsoft Azure (VMs, networking, storage, Security Center, Backup, Site Recovery)
• Azure Landing Zones, Cloud Adoption Framework, Governance (Management Groups, RBAC)
• ExpressRoute, Site‑to‑Site VPN
• Microsoft 365 (Exchange Online, SharePoint, Teams, OneDrive)
• Microsoft Entra ID (Azure AD), Conditional Access, MFA
• Intune, Defender for Endpoint, Defender for Office 365, Defender for Cloud Apps
• Teams voice (calling plans, auto attendants, call queues)
• Data Loss Prevention, Microsoft Purview, sensitivity labels
• FinOps, cost management, Azure Privileged Identity Management, Just‑In‑Time access
• Windows Server, Active Directory