Azure Cloud Engineer

Hands on experience:

• Windows Administration: Expertise in Windows AD, Domains, DNS, DHCP, Forest creation, modification, and integration.
• Security & Authentication: Knowledge of External DNS, NTLM, Kerberos, Certificate Authority, and SAML SSO.
• Intune Administration
• Azure AD & Tenant Configuration
• O365 Administration: Not an expert-level requirement but should understand and be able to create connectors.
• Networking Basics: VLAN, VLAN segmentation, Firewalls, Privileged Access Management.
• Knowledge in SQL Administration Not an expert level
• Azure Administration: Experience in deploying Azure resources, managing Resource Groups (RGs), NSGs, tagging, ARM templates, and VPN gateways.

Good to Have Experience of the Following Scenarios:

• Active Directory Forest Trust with Entra Connect Sync
• Establishing a bidirectional forest trust between two AD forests.
• Synchronizing both forests to a single Entra tenant using Microsoft Entra Connect Sync.
• Enabling cross-forest authentication for Entra-integrated and AD-integrated apps.
• Requires TCP/IP network connectivity between domains and domain controllers.
• Ideal for legacy AD-integrated apps that require cross-forest access.
• Synchronizing Both Forests via a Single Entra Connect
• Using a single Entra Connect server to sync objects from both forests to one tenant, without a forest trust.
• Enabling authentication for Entra-integrated apps but restricting AD-integrated app access between forests.
• Requires network access between the Entra Connect server and both domain controllers.
• Suitable when cross-forest AD app access is not needed.
• Entra Connect Cloud Sync for a Secondary Forest
• Utilizing Cloud Sync (lightweight agent) for the secondary forest while keeping the primary Entra Connect setup.
• Synchronization without full AD connectivity, ideal for geographically distributed networks.
• Supports hybrid environments, where one forest operates in a cloud-centric model.