Infrastructure Engineer

Required Technical Skills & Qualifications

Microsoft Entra ID & Active Directory: Technical knowledge of hybrid identity architectures, Kerberos/NTLM, SAML, OAuth, GPO management, and Entra ID governance.

Microsoft 365 Ecosystem: Proven experience engineering and securing M365 suites, including advanced enterprise licensing configurations (E3/E5).

Networking: Solid understanding of TCP/IP, DNS, VLANs, subnetting, and managing enterprise firewalls (e.g., Cisco, Fortinet, Sophos).

Scripting: Proficiency in PowerShell for managing M365/Entra objects and automating system administration tasks.

English: Professional working proficiency in English (written and spoken), with the ability to collaborate effectively with global teams, document technical processes, and participate in cross-regional projects.

2-3 years of experience in a dedicated Infrastructure or Network Engineering role.

Relevant Microsoft certifications are valued (e.g., Microsoft Certified: Enterprise Administrator Expert, Microsoft Certified: Identity and Access Administrator Associate).

Relevant networking certifications are valued (e.g., CCNA, Network+, or equivalent vendor-specific certifications).

Experience transitioning traditional on-premises infrastructure to cloud-native or hybrid models.

Soft Skills & Cultural Fit

Problem-Solving Mindset: Excellent analytical skills with a knack for isolating root causes across complex network and identity layers.

Communication: Strong interpersonal and communication skills, with the ability to collaborate effectively across local and global teams and share knowledge proactively.

Adaptability: Comfort working in a fast-paced environment with evolving cloud technologies and security landscapes.

What We Offer

Salary: €18,000 - €24,000 gross per year.

Permanent contract.

Hybrid working model: Three days per week in our Vigo office and two days working remotely.

Early finish on Fridays: Working hours from 8:00 AM to 3:00 PM, so you can start your weekend a little earlier.

Summer schedule: From June to September, enjoy reduced working hours from 8:00 AM to 3:00 PM, giving you more time to enjoy your afternoons.

Meal allowance, helping to make your working day easier.

Private health insurance, because taking care of your wellbeing matters.

Employee Assistance Programme focused on supporting your health and wellbeing.

Birthday day off, so you can celebrate your special day however you choose.

Additional annual leave: Opportunity to earn up to two extra vacation days per year in recognition of your commitment and contribution.

Infrastructure Engineer

Construdata21, powered by Hubexo | Vigo | Hybrid: 3 days office and 2 remotely

Role Overview

We are seeking a highly skilled and proactive Infrastructure Engineer to design, secure, maintain, and optimize our enterprise IT infrastructure. In this role, your primary focus will be managing our MS 365/Entra environments, ensuring seamless connectivity, robust identity management, and a secure modern workplace.

This role will provide infrastructure and workplace support across the Iberian region while collaborating closely with the wider global IT organisation.

The ideal candidate is an experienced IT infrastructure professional with strong knowledge of Microsoft 365, Microsoft Entra ID, legacy Active Directory, and networking. You will play a critical role in engineering identity solutions, modernizing network architecture, and driving infrastructure projects from conception to completion together with our wider global IT team.

Key Responsibilities

Identity & Modern Workplace Management

Cloud Identity & Governance: Manage Microsoft Entra ID as the primary identity provider. Maintain Conditional Access policies, Multi-Factor Authentication (MFA), Privileged Identity Management (PIM), and Single Sign-On (SSO) integrations for enterprise applications.

Directory Services: Maintain on-premises Active Directory and domain services (DNS, GPOs, OUs) for legacy workloads, supporting the long-term roadmap toward cloud-native identity.

Microsoft 365 Engineering

Tenant Administration: Serve as the primary engineer for the Microsoft 365 tenant, optimizing core services including Exchange Online, SharePoint, OneDrive, and Microsoft Teams.

Modern Endpoint Management: Utilize Microsoft Intune for device enrollment, mobile device management (MDM), mobile application management (MAM), and automated deployment (Autopilot).

Security & Compliance: Monitor Microsoft Purview and Defender for Office 365 to ensure data loss prevention (DLP), eDiscovery, and threat protection are aligned with company compliance standards.

Enterprise & Cloud Networking

Network Infrastructure: Configure, monitor, and troubleshoot enterprise networking equipment, including routers, switches, firewalls, and wireless access points.

Cloud Networking: Manage Azure virtual networks (VNets), subnets, Network Security Groups (NSGs), Azure Firewalls, and Application Gateways.

Connectivity & Routing: Manage WAN, LAN, and VPN architectures. Optimize cloud connectivity paths to ensure low-latency access to Microsoft 365 and cloud resources.

Network Security: Maintain network segmentation, firewall rule bases, and intrusion prevention systems (IPS) to safeguard infrastructure from external and internal threats.

Operations & Project Delivery

Infrastructure Automation: Utilize PowerShell or other scripting languages to automate repetitive tasks, provisioning, and identity workflows.

Monitoring & Escalation: Act as the escalation point for complex identity, cloud, and network outages, utilizing monitoring tools to proactively identify and resolve bottlenecks, coordinating response with the global IT team.

Documentation: Create and maintain standard operating procedures (SOPs), and other compliance and operation relevant documentation.