Infrastructure Engineer

Infrastructure Engineer 

Construdata21, powered by Hubexo | Vigo | Hybrid: 3 days office and 2 remotely

Role Overview 

We are seeking a highly skilled and proactive Infrastructure Engineer to design, secure, maintain, and optimize our enterprise IT infrastructure. In this role, your primary focus will be managing our MS 365/Entra environments, ensuring seamless connectivity, robust identity management, and a secure modern workplace.  

This role will provide infrastructure and workplace support across the Iberian region while collaborating closely with the wider global IT organisation. 

The ideal candidate is an experienced IT infrastructure professional with strong knowledge of Microsoft 365, Microsoft Entra ID, legacy Active Directory, and networking. You will play a critical role in engineering identity solutions, modernizing network architecture, and driving infrastructure projects from conception to completion together with our wider global IT team. 

Key Responsibilities 

 Identity & Modern Workplace Management 

• Cloud Identity & Governance: Manage Microsoft Entra ID as the primary identity provider. Maintain Conditional Access policies, Multi-Factor Authentication (MFA), Privileged Identity Management (PIM), and Single Sign-On (SSO) integrations for enterprise applications.
• Directory Services: Maintain on-premises Active Directory and domain services (DNS, GPOs, OUs) for legacy workloads, supporting the long-term roadmap toward cloud-native identity. 

Microsoft 365 Engineering 

• Tenant Administration: Serve as the primary engineer for the Microsoft 365 tenant, optimizing core services including Exchange Online, SharePoint, OneDrive, and Microsoft Teams.
• Modern Endpoint Management: Utilize Microsoft Intune for device enrollment, mobile device management (MDM), mobile application management (MAM), and automated deployment (Autopilot).
• Security & Compliance: Monitor Microsoft Purview and Defender for Office 365 to ensure data loss prevention (DLP), eDiscovery, and threat protection are aligned with company compliance standards. 

Enterprise & Cloud Networking 

• Network Infrastructure: Configure, monitor, and troubleshoot enterprise networking equipment, including routers, switches, firewalls, and wireless access points.
• Cloud Networking: Manage Azure virtual networks (VNets), subnets, Network Security Groups (NSGs), Azure Firewalls, and Application Gateways.
• Connectivity & Routing: Manage WAN, LAN, and VPN architectures. Optimize cloud connectivity paths to ensure low-latency access to Microsoft 365 and cloud resources.
• Network Security: Maintain network segmentation, firewall rule bases, and intrusion prevention systems (IPS) to safeguard infrastructure from external and internal threats. 

Operations & Project Delivery 

• Infrastructure Automation: Utilize PowerShell or other scripting languages to automate repetitive tasks, provisioning, and identity workflows.
• Monitoring & Escalation: Act as the escalation point for complex identity, cloud, and network outages, utilizing monitoring tools to proactively identify and resolve bottlenecks, coordinating response with the global IT team.
• Documentation: Create and maintain standard operating procedures (SOPs), and other compliance and operation relevant documentation. 

Required Technical Skills & Qualifications 

Must-Have Core Competencies: 

• Microsoft Entra ID & Active Directory: Technical knowledge of hybrid identity architectures, Kerberos/NTLM, SAML, OAuth, GPO management, and Entra ID governance.
• Microsoft 365 Ecosystem: Proven experience engineering and securing M365 suites, including advanced enterprise licensing configurations (E3/E5).
• Networking: Solid understanding of TCP/IP, DNS, VLANs, subnetting, and managing enterprise firewalls (e.g., Cisco, Fortinet, Sophos).
• Scripting: Proficiency in PowerShell for managing M365/Entra objects and automating system administration tasks.
• English: Professional working proficiency in English (written and spoken), with the ability to collaborate effectively with global teams, document technical processes, and participate in cross-regional projects. 

Preferred Experience & Certifications: 

• 2-3 years of experience in a dedicated Infrastructure or Network Engineering role.
• Relevant Microsoft certifications are valued (e.g., Microsoft Certified: Enterprise Administrator Expert, Microsoft Certified: Identity and Access Administrator Associate).
• Relevant networking certifications are valued (e.g., CCNA, Network+, or equivalent vendor-specific certifications).
• Experience transitioning traditional on-premises infrastructure to cloud-native or hybrid models.

Soft Skills & Cultural Fit 

• Problem-Solving Mindset: Excellent analytical skills with a knack for isolating root causes across complex network and identity layers.
• Communication: Strong interpersonal and communication skills, with the ability to collaborate effectively across local and global teams and share knowledge proactively.
• Adaptability: Comfort working in a fast-paced environment with evolving cloud technologies and security landscapes. 

What We Offer 

• Salary: €18,000 - €24,000 gross per year.
• Permanent contract.
• Hybrid working model: Three days per week in our Vigo office and two days working remotely.
• Early finish on Fridays: Working hours from 8:00 AM to 3:00 PM, so you can start your weekend a little earlier.
• Summer schedule: From June to September, enjoy reduced working hours from 8:00 AM to 3:00 PM, giving you more time to enjoy your afternoons.
• Meal allowance, helping to make your working day easier.
• Private health insurance, because taking care of your wellbeing matters.
• Employee Assistance Programme focused on supporting your health and wellbeing.
• Birthday day off, so you can celebrate your special day however you choose.
• Additional annual leave: Opportunity to earn up to two extra vacation days per year in recognition of your commitment and contribution. 

Equal Opportunities 

At Hubexo, we are committed to fostering an inclusive and diverse workplace where everyone has equal opportunities to grow and succeed. We welcome applications from all qualified candidates and assess each application based on skills, experience, and potential, regardless of age, gender, ethnic origin, sexual orientation, gender identity, religion, or disability. 

If you require any reasonable adjustments or accommodations during the recruitment process, please let us know, and we will be happy to support you. 

Joining Hubexo 

We’re a global team of around 2,000 people across 25 countries, connected by a shared purpose: helping the world build better. 

When you join Hubexo, you gain more than just a job. You’ll find opportunities to grow, the tools and support you need to do your best work, and colleagues who value collaboration, trust, and genuine teamwork.