About Us:

At apexanalytix, we’re lifelong innovators! Since the date of our founding nearly four decades ago we’ve been consistently growing, profitable, and delivering the best procure-to-pay solutions to the world.   We’re the perfect balance of established company and start-up.  You will find a unique home here. 

And you’ll recognize the names of our clients. Most of them are on The Global 2000. They trust us to give them the latest in controls, audit and analytics software every day.  Industry analysts consistently rank us as a top supplier management solution, and you’ll be helping build that reputation.

Read more about apexanalytix - https://www.apexanalytix.com/about/

Job Details

Job Location: Noida, Candor Tech Space, Sector- 135

Timing: 2.00 PM to 11.00 PM

The Role: Senior Cloud Engineer

Quick Take - 

We're looking for a senior infrastructure engineer who can own our Windows-based core services — Exchange, Active Directory, DNS, and DHCP — while contributing to our growing Kubernetes and KubeVirt footprint. This is a hybrid role: the majority of your time will be spent keeping mission-critical Windows infrastructure healthy, secure, and well-architected, with a meaningful secondary focus on modernizing parts of our environment onto Kubernetes-based platforms.

If you're a strong Windows systems engineer who's curious about cloud-native infrastructure and wants room to grow into Kubernetes and virtualization-on-Kubernetes work, this role is built for that trajectory.

 The Work - 

Windows Infrastructure & Microsoft 365 (Primary)

You'll be the senior technical owner for our Microsoft stack, both on-prem and in the cloud. On the on-prem side: architect and maintain Active Directory (forest and domain design, Group Policy, replication health, trusts, schema changes), run Exchange Server (mailbox databases, DAGs, transport, hybrid connectivity, patching cadence including CUs and SUs), and manage enterprise DNS and DHCP at scale — including AD-integrated DNS, conditional forwarders, scope design, failover, and reservations.

On the Microsoft 365 and Azure side: administer Exchange Online and the broader M365 suite, manage hybrid identity through Entra ID and Entra Connect, and own compliance and data governance tooling — eDiscovery (standard and premium), Microsoft Purview for data classification, DLP, retention, and insider risk, and audit log workflows. Expect to partner with Security and Legal on investigations and compliance holds.

You'll also own application email enablement end to end: setting up and troubleshooting SMTP relay (on-prem connectors and Exchange Online direct send / SMTP AUTH), modern authentication via OAuth 2.0 for application mail flows, and email authentication standards — SPF, DKIM, and DMARC — including alignment, policy tuning, and remediation of deliverability issues.

You'll handle Windows Server lifecycle work end to end: provisioning, patching, hardening, performance tuning, and decommissioning. Expect to own escalations for anything that touches identity, mail flow, or name resolution.

Kubernetes & Virtualization (Secondary)

You'll work alongside the cloud-native team to deploy and operate Kubernetes clusters in on-prem and hybrid environments, with a particular focus on KubeVirt for running VM workloads on Kubernetes. This includes cluster lifecycle (Cluster API where it fits), Helm-based application deployment, ingress (Nginx or Citrix), and integrating these platforms with our existing AD, DNS, and storage. You don't need to walk in as a Kubernetes expert — but you should be comfortable with Linux administration and motivated to grow into this side of the stack.

Linux & Hypervisor Support

Comfort with Linux administration (RHEL family preferred), KVM-based virtualization, and shared storage concepts (NFS).

Automation, Monitoring & Documentation

Automate provisioning and routine operations using PowerShell (primary), Ansible, and Python or Bash where appropriate. Help operate our monitoring stack (Prometheus, Grafana, Windows-native tooling, SCOM if applicable). Maintain runbooks, architecture diagrams, and incident postmortems. Mentor junior admins on AD, Exchange, and Windows best practices.

Collaboration

Partner with Security, DevOps, and application teams. Coordinate change windows, lead RCAs for major incidents, and contribute to capacity and DR planning.

Must Have:

•       7+ years in Windows systems administration with deep, hands-on Active Directory and Exchange Server expertise.

•       Production experience with Exchange Server 2016/2019/SE — including DAGs, hybrid configurations, CU/SU patching, and migrations.

•       Strong Microsoft 365 administration experience: Exchange Online, hybrid mail flow, and the broader Office 365 / M365 admin surface.

•       Hands-on experience with eDiscovery (standard and/or premium) and Microsoft Purview — data classification, DLP, retention policies, and audit/compliance workflows.

•       Strong working knowledge of email authentication and application mail flow: SMTP relay design, OAuth 2.0 for mail, and SPF / DKIM / DMARC implementation and troubleshooting.

•       Azure administration fundamentals, including Entra ID and Entra Connect for hybrid identity.

•       Strong AD design skills: multi-domain or multi-site environments, GPO at scale, AD replication troubleshooting, identity hygiene.

•       Enterprise DNS and DHCP administration, including AD-integrated DNS and DHCP failover.

•       PowerShell proficiency for automation and operational tooling.

•       Working knowledge of Linux administration and KVM-based virtualization.

•       Familiarity with Kubernetes concepts and willingness to grow into KubeVirt and cluster operations as a meaningful part of the role.

•       Strong troubleshooting instincts across identity, mail flow, networking, and storage.

Nice to have:

•       Hands-on Kubernetes cluster operations (on-prem, hybrid, or managed services like AKS).

•       Conditional access, Intune, and broader Entra ID security tooling.

•       IaC with OpenTofu or Terraform, Ansible at scale.

•       Networking depth: VLANs, VXLAN, BGP, SDN.

•       Physical server work: IPMI/iLO/DRAC, RAID, SAN/NAS, Cisco UCS.

•       Disaster recovery design and backup tooling for both Windows and containerized workloads.

Over the years, we’ve discovered that the most effective and successful associates at apexanalytix are people who have a specific combination of values, skills, and behaviors that we call “The apex Way”. Read more about The apex Way - https://www.apexanalytix.com/careers/

Benefits

At apexanalytix we know that our associates are the reason behind our successes. We truly value you as an associate and part of our professional family. Our goal is to offer the very best benefits possible to you and your loved ones. When it comes to benefits, whether for yourself or your family the most important aspect is choice. And we get that. apexanalytix offers competitive benefits for the countries that we serve, in addition to our BeWell@apex initiative that encourages employees’ growth in six key wellness areas: Emotional, Physical, Community, Financial, Social, and Intelligence.

With resources such as a strong Mentor Program, Internal Training Portal, plus Education, Tuition, and Certification Assistance, we provide tools for our associates to grow and develop.