Cloud & Hybrid Infrastructure Engineer

About Alkem:

Alkem Laboratories Limited is an Indian multinational pharmaceutical company headquartered in Mumbai, that manufactures and sells pharmaceutical generics, formulations and nutraceuticals in India and globally over 50 countries. We have consistently been ranked amongst the top five pharmaceutical companies in India. Our portfolio includes illustrious brands like Clavam, Pan, Pan-D, and Taxim-O, which feature amongst the top 50 pharmaceutical brands in India.

Purpose of the Role:

To own the architecture, engineering, operations, security, availability, identity services, automation, resilience, and cost governance of Alkems hybrid infrastructure landscape, including Azure, AWS, Microsoft Active Directory, Microsoft Entra ID, virtualization platforms, data centres, storage, backup, and disaster recovery environments.

The role is responsible for delivering secure, scalable, resilient, and cost-effective infrastructure and identity services across Alkems corporate offices, manufacturing locations, R&D centres, data centres, and international operations.

Key Responsibilities:

Hybrid Cloud Architecture & Engineering

Design, implement, and maintain reference architectures, standards, patterns, and governance frameworks for Azure, AWS, private cloud, and on-premise infrastructure environments.Evaluate workload placement strategies based on business requirements, performance, security, compliance, recoverability, integration, data residency, and total cost of ownership.Conduct architecture reviews for new applications, cloud migrations, infrastructure upgrades, and modernization initiatives.Maintain architecture documentation, infrastructure standards, build specifications, configuration baselines, technical diagrams, and operational runbooks.Cloud Platform Operations & Governance

Manage cloud subscriptions, accounts, landing zones, management groups, resource hierarchies, tagging structures, policies, quotas, and shared services.Implement and govern controls for identity integration, privileged access, key and secret management, cloud connectivity, monitoring, logging, vulnerability remediation, backup, and patch management.Monitor cloud service health, capacity, availability, utilization, and performance metrics.Drive cloud governance, operational excellence, and FinOps initiatives to optimize infrastructure costs.Identity & Access Infrastructure Management

Administer and support Microsoft Active Directory, Hybrid Active Directory, Microsoft Entra ID, and enterprise identity management platforms.Manage domain controllers, Active Directory forests, trusts, replication, DNS integration, Sites and Services, and Group Policy administration.Maintain hybrid identity services including Microsoft Entra Connect, Cloud Sync, federation services, and directory synchronization.Govern Single Sign-On (SSO), Multi-Factor Authentication (MFA), passwordless authentication, and Conditional Access policies.Manage identity lifecycle processes including user provisioning, deprovisioning, RBAC, service accounts, delegated administration, and privileged access controls.Support Privileged Identity Management (PIM), identity governance, access reviews, tiered administration, and privileged account protection.Ensure identity platform resilience through backup, disaster recovery, platform hardening, recovery testing, and replication monitoring.Support application integrations using LDAP, Kerberos, SAML, OAuth, OpenID Connect, SCIM, and modern authentication protocols.Integrate identity logs, audit trails, authentication events, and threat intelligence with enterprise SIEM and SOC platforms.Drive identity modernization and Zero Trust initiatives in collaboration with Cybersecurity, HR, application, and business stakeholders.On-Premise Infrastructure, Virtualization & Storage

Manage physical and virtual server infrastructure, operating systems, hypervisors, clusters, storage systems, converged infrastructure, and management platforms.Oversee provisioning, hardening, patching, performance tuning, capacity management, lifecycle refresh, decommissioning, and compliance management.Support business-critical infrastructure for SAP, manufacturing systems, databases, middleware, analytics platforms, and enterprise applications.Automation, Observability & Resilience

Drive automation initiatives using scripting, Infrastructure as Code (IaC), configuration management tools, orchestration platforms, and reusable templates.Implement automated governance, compliance checks, and operational workflows.Establish centralized monitoring, observability, log management, dashboarding, event correlation, alerting, and service health reporting.Own enterprise backup, replication, recovery infrastructure, immutable repositories, cyber recovery, and disaster recovery readiness.Conduct restoration testing, disaster recovery drills, and business continuity exercises aligned with defined recovery objectives.Security & Service Management

Implement secure .