About the role

Duration: 1 yr ext.

Salary : given (+single benefits)

Location: DUBAI-Onsite

Client: Healthcare

Notice: immediate to max 1 month

Candidate location: UAE base (priority) outside UAE (Immediate joiners ONLY)

Nationality: (excluding Pakistanis & Egyptians)

Kindly send CVs on or before Oct 1; Thurs 10 AM.

L3 Azure Expert (Microsoft 365, Intune, VDI)

18000 AED negotiable

*Pls note that salary is negotiable. Pls ONLY propose your best candidates.

Position	Name of the candidate	Notice period	Location	Contact Numbers	Email ID	Nationality	Current Salary	Expected Salary	Agency	MOFA Attested Degree (Y/N)

Job Description: L3 Azure Expert (Microsoft 365, Intune, VDI)

Location

Dubai, UAE (Onsite)

Employment Type

Full-time

Job Summary

We are seeking an experienced Azure Expert to design, implement, secure and operate its Microsoft cloud and modern workplace platforms, covering Microsoft Azure, Microsoft 365, Microsoft Intune and Virtual Desktop Infrastructure (VDI). The role holder will ensure these platforms are reliable, secure, cost-effective and compliant, enabling end users to work productively from any location and device.

The role acts as the technical subject matter expert for Microsoft cloud estate, working closely with infrastructure, security, application, service desk and Microsoft partner teams.

Key Responsibilities

Microsoft Azure

Design, implement and manage Azure infrastructure, including landing zones, subscriptions and management groups, virtual machines, storage, virtual networks, VPN and ExpressRoute connectivity, Azure Firewall, load balancers and private endpoints.

Design, deploy and manage Azure application and integration services, including Azure API Management (APIM) for publishing, securing and monitoring APIs; Azure Application Gateway with Web Application Firewall (WAF) and Azure Front Door for secure application delivery; and Azure App Service, Azure Functions and Logic Apps for hosting web applications, APIs and integrations.

Configure and manage supporting platform services, such as Azure SQL Database, Azure Container Apps or Azure Kubernetes Service (AKS), Azure Service Bus and Azure Cache for Redis, including scaling, custom domains, TLS certificates, VNet integration and private access.

Implement Azure governance using Azure Policy, role-based access control (RBAC), resource tagging and naming standards, in line with CLIENT’S and UAE Government cloud requirements.

Automate provisioning and configuration using Infrastructure as Code (Bicep, ARM templates or Terraform) and scripting (PowerShell, Azure CLI).

Implement backup, disaster recovery and high availability using Azure Backup, Azure Site Recovery and availability zones, and take part in periodic recovery testing.

Monitor performance, availability and cost using Azure Monitor, Log Analytics and Microsoft Cost Management, and implement cost optimization measures such as right-sizing, reservations and savings plans.

Secure the Azure environment using Microsoft Defender for Cloud, Azure Key Vault, network security groups and secure score recommendations.

Microsoft 365 and Identity

Administer Microsoft 365 services, including Exchange Online, SharePoint Online, OneDrive, Microsoft Teams and Microsoft 365 Apps, including tenant configuration, licensing and service health.

Manage Microsoft Entra ID (Azure AD), including hybrid identity with Entra Connect, single sign-on, multi-factor authentication, Conditional Access, Privileged Identity Management and identity governance.

Implement data protection and compliance using Microsoft Purview, including sensitivity labels, Data Loss Prevention (DLP), retention policies, eDiscovery and audit, to protect sensitive health data.

Configure and manage Microsoft Defender for Office 365 and Defender for Identity in coordination with the security team.

Microsoft Intune and Endpoint Management

Manage Windows, macOS, iOS and Android devices through Microsoft Intune, including enrollment, configuration profiles, compliance policies and security baselines.

Implement Windows Autopilot for zero-touch device provisioning, and manage application packaging and deployment (Win32, Microsoft Store, line-of-business apps).

Manage Windows Update for Business, update rings and driver and feature updates, and support co-management with Configuration Manager (SCCM) where applicable.

Implement mobile application management (MAM) and app protection policies for bring-your-own-device (BYOD) scenarios, and integrate Intune with Microsoft Defender for Endpoint.

Virtual Desktop Infrastructure (VDI)

Design, deploy and manage virtual desktop environments using Azure Virtual Desktop and/or Windows 365, including host pools, application groups, workspaces and session hosts.

Manage golden images, FSLogix profile containers, MSIX app attach, autoscaling plans and user experience optimization, including Microsoft Teams optimization.

Monitor VDI performance, capacity and user experience using Azure Virtual Desktop Insights, and troubleshoot connectivity and session issues.

Support existing or legacy VDI platforms (e.g., Citrix, VMware Horizon) and plan migrations to Azure-based solutions where appropriate.

General Responsibilities

Act as the escalation point for complex incidents, problems and changes related to Azure, Microsoft 365, Intune and VDI, in line with CLIENT’S IT service management processes.

Evaluate the Microsoft roadmap and new features, and recommend improvements to architecture, security and user experience.

Generate periodic reports on platform health, availability, capacity, security posture (e.g., Secure Score, device compliance), license usage and cloud costs for management.

Maintain up-to-date architecture diagrams, configuration documentation, runbooks and standard operating procedures.

Ensure compliance with CLIENT’S information security policies and applicable UAE and Dubai Government regulations, including DESC requirements and healthcare data protection rules.

Required Skills & Experience

Bachelor’s degree in Information Technology, Computer Science or a related field.

[7–10]+ years of experience in Microsoft infrastructure, including at least [5] years with Azure and Microsoft 365 in an enterprise environment.

Proven experience designing and operating Azure infrastructure, networking, identity and security at scale.

Hands-on experience with Azure PaaS and application delivery services, including API Management, Application Gateway (WAF), Front Door, App Service and Azure Functions.

Strong hands-on experience with Microsoft Intune, Windows Autopilot and modern endpoint management.

Hands-on experience deploying and managing Azure Virtual Desktop and/or Windows 365.

Proficiency in PowerShell and Infrastructure as Code (Bicep, ARM or Terraform); experience with Azure DevOps or GitHub Actions is an advantage.

Good understanding of Zero Trust principles, Microsoft security solutions and cloud security best practices.

Experience with hybrid environments, including on-premises Active Directory, Windows Server and Configuration Manager.

Experience in healthcare or government environments is preferred.

Preferred Certifications

Microsoft Certified: Azure Solutions Architect Expert (AZ-305) and Azure Administrator Associate (AZ-104)
Microsoft 365 Certified: Administrator Expert (MS-102)
Microsoft 365 Certified: Endpoint Administrator Associate (MD-102)
Microsoft Certified: Azure Virtual Desktop Specialty (AZ-140)
Microsoft Certified: Azure Security Engineer Associate (AZ-500) and/or Identity and Access Administrator Associate (SC-300) (advantageous)
ITIL 4 Foundation (advantageous)

Key Competencies

Strong analytical and troubleshooting skills
Architecture and solution design thinking
Security-first and automation-first mindset
Stakeholder management and ability to explain technical topics to non-technical audiences
Clear written and verbal communication in English (Arabic is an advantage)
Commitment to continuous learning as Microsoft cloud services evolve