Senior Microsoft Cloud Engineer - Identity, AVD & AIOps

Are you ready to elevate your career with a global leader in infrastructure solving complex problems and generating a positive outcome on people’s lives? At Ferrovial, we are not just a company; we are a community of innovators and trailblazers. Listed on three major stock markets: Nasdaq (US), Euronext Amsterdam (Netherlands) and IBEX 35 (Spain), we are also member of the Dow Jones Sustainability Index and FTSE4Good. We operate in more than 15 countries and have a workforce of over 24,000 professionals worldwide. Ferrovial’s activity is carried out through our business units, including Highways, Airports, Construction, and Energy.  

Our Corporate organization oversees business activities, providing strategic planning, communication, legal, finance and human resources services to the business units. As a member of our corporate organization, you will have a broad view of our company, further supporting your career development.

Why Ferrovial?

• Global presence, local impact: Be part of a company that is shaping the future of infrastructure worldwide, with challenging roles and projects that make a real difference.
• Collaborative excellence: Work alongside talented professionals in a collaborative environment where your ideas and contributions are valued.    
• Inclusive Culture: Thrive in an innovative and respectful workplace that values every voice, celebrates what makes us unique and turns differences into innovation.
• Career growth: Benefit from global and cross-business unit mobility, with development processes designed to ensure your professional growth.
• Compelling benefits and employee wellbeing: Enjoy a comprehensive benefits package that rewards your hard work and dedication and take advantage of initiatives designed to support your physical and psychological health.
• Productivity tools: Utilize cutting-edge tools like Microsoft Copilot to enhance your productivity and efficiency.

About the Role

We are looking for a Microsoft Specialist to join Ferrovial’s IT Workplace team, responsible for the backend of virtualization and identity platforms.

This role is focused on managing the design, operation and optimization of Azure based Virtualization environments (AVD, Windows 365), supporting scalability, automation and the progressive adoption of AIOps and intelligent monitoring.

You will also oversee the identity systems: Microsoft Entra ID, hybrid Active Directory, identity synchronization and SSO enablement. You will work on enabling secure access for internal platforms, development environments and external partners, within regulated and compliance-driven contexts (SOX).

Key Responsibilities

Cloud Virtualisation

• Contribute to the architecture, deployment and operation of Azure Virtual Desktop (AVD) and Windows 365 environments.
• Manage and support large Azure virtual machine environments, ensuring performance, availability and scalability.
• Assist in defining growth and capacity models for virtualized platforms.
• Improve environment build and configuration processes, increasing automation and standardization.

Identity & Access – Microsoft Entra ID

• Define and supervise Microsoft Entra ID and hybrid identity environments.
• Manage users, groups, roles and specialized permissions and policies, including development and testing scenarios.
• Implement and support Single Sign-On (SSO) integrations with Microsoft 365, Intune, internal systems and partner platforms.
• Support identity federation and access enablement for external organizations and business units.
• Participate in SOX controls and audits related to identity and directory services, including periodic access reviews.
• Work closely with Security and Cloud teams to support identity-related incidents, access governance and risk management.

Automation & AIOps

• Define automation and operational workflows to optimize the management, maintenance and performance of the platforms.
• Create mechanisms to proactively detect issues, analyze trends and improve operations.
• Contribute to the adoption of AIOps principles.

Qualifications

Required

• Around 5 years of experience in Microsoft-based infrastructure or cloud environments.
• Hands-on experience with Microsoft Entra ID and Microsoft Virtualization platforms.
• Experience working in corporate IT environments with structured security and compliance requirements.
• Solid troubleshooting skills and understanding of cloud infrastructure architecture.
• Advanced English (B2 high / C1) for collaboration with international technical teams.

Nice to Have

• Experience with Intune and Windows Autopilot.
• Knowledge of Zero Trust security concepts.
• Microsoft certifications such as AZ-104, AZ-140 or SC-300.
• Exposure to AIOps or AI-assisted operations in infrastructure environments.
• Experience in Azure migration projects and hybrid-to-cloud transitions.

Seize the challenge. Move the world together! Innovative, creative, respectful, and diverse are some of the ways we describe ourselves. We are motivated by challenges, and we collaborate across our business units to move the world together. Your journey to a fulfilling career starts here!

Ferrovial is an equal opportunity employer.  We treat all jobs applications equally, regardless of gender, color, race, ethnicity, religion, national origin, age, disability, pregnancy, sexual orientation, gender identity and expression, covered veteran status or protected genetic information (each, a “Protected Class”), or any other protected class in accordance with applicable laws.

#WeAreFerrovial