Cloud and Server Engineer

MediCard Phils., Inc. is one of the country's leading HMO and the only HMO founded and run by Doctors. Since its inception, the concept of service-oriented total health care has been the molding ideal of MediCard. The competition is vast, and the benefits being offered by the competitors are tempting. However, MEDICard has taken the lead in providing innovative and productive ideas that cut down the cost of health maintenance without compromising its quality.

MediCard now boasts of more than half a million members and over 54,000 accredited doctors in over 1,000 hospitals and clinics nationwide. It also operates 16 MediCard free-standing clinics that provide services at par with those offered by hospitals minus the confinement.

MediCard is currently looking for assertive, dynamic and energetic individuals to fill up the following vacancy:

The Cloud and Server Engineer will design, implement, and manage the company’s cloud infrastructure and server environments. The ideal candidate will have extensive experience with cloud platforms, server management, and a strong understanding of networking and security principles.Responsibilities
Azure Cloud EngineeringDeploy, configure, and manage Azure services (VMs, VNets, Storage, Key Vault, Load Balancer, Backup/ASR, Monitor, Defender for Cloud).
Implement hybrid connectivity (site‑to‑site VPN/ExpressRoute), Azure AD Connect, Conditional Access, and identity governance.
Optimize cost, performance, and reliability using tagging, budgets, autoscale, availability sets/zones, and policy guardrails.

On‑Premise Server & VirtualizationAdminister Windows Server (2016/2019/2022) roles—AD DS, DNS, DHCP, GPO, file/print, and PKI/Certificate Services.
Perform patching, upgrades, and vulnerability remediation.
Maintain configuration baselines, capacity plans, and runbooks.

Active Directory & IdentityDesign and maintain Active Directory: domain/forest topology, OU structure, GPOs, replication, and FSMO roles.
Manage Azure Active Directory: Conditional Access, MFA, SSO (SAML/OAuth/OIDC), application registrations, and identity lifecycle.
Enforce least‑privilege access, PAM/PIM controls, and secure join/enrollment processes.

Microsoft 365 AdministrationManage M365 services including Exchange Online, SharePoint Online, OneDrive for Business, Teams, and Microsoft 365 Groups.
Oversee M365 licensing, user provisioning, compliance configurations, retention policies, and DLP/security settings.
Coordinate tenant health, service adoption, productivity improvements, and feature rollouts.
Support integration between M365, Azure AD, Intune, and security tools (Defender suite).

Endpoint Management with Microsoft IntuneOwn Microsoft Intune/Endpoint Manager: device enrollment (Autopilot/ABM), compliance policies, configuration profiles, app lifecycle, and update rings.
Standardize Windows, iOS/iPadOS, and Android posture (encryption, firewall, Defender, BitLocker/FileVault policies) and integrate with Azure AD.
Build zero‑touch provisioning flows, remediation scripts, and hardware lifecycle (procurement to secure decommission).

DevOps & AutomationUse PowerShell/Azure CLI for administrative automation and remediations at scale.
Build and maintain CI/CD using Azure DevOps or GitHub Actions for infrastructure and server configuration (e.g., DSC/Ansible).
Integrate testing, approvals, and change controls aligned to ITIL/DevOps best practices.

Security, Monitoring & ComplianceApply security baselines, patching cadence, Defender for Endpoint/Server integration, and vulnerability remediation.
Support audits with accurate documentation (as‑built, diagrams, SOPs, CMDB/asset references).

Operational SupportProvide Tier 2/3 escalation for cloud, server, identity, and endpoint issues; own problem management and root‑cause analysis.
Collaborate with networking, security, and application teams to ensure end‑to‑end service reliability and performance.


Qualifications
Bachelor’s degree in Computer Science, Information Technology, or a related field.
3+ years in server/cloud engineering across Azure and onprem environments.
Strong expertise in Active Directory, Azure AD, Windows Server, and hybrid identity (AD Connect).
Hands‑on with Microsoft Intune/Endpoint Manager for Windows and mobile platforms.
Solid PowerShell skills and CI/CD (Azure DevOps or GitHub Actions).
Working knowledge of networking fundamentals (TCP/IP, DNS, DHCP, VPN) and security best practices.
Strong knowledge of server operating systems (Windows, Linux).
Familiarity with security best practices and tools.
Excellent problem-solving and analytical skills.
Strong communication and teamwork abilities.

Preferred Qualifications:
Relevant certifications (e.g., Microsoft Certified: Azure Administrator).
Experience with containerization technologies (Docker, Kubernetes).
Familiarity with Linux servers, containerization, or configuration management tools (DSC/Ansible).
Knowledge of DevOps practices and CI/CD pipelines.