Entra Hybrid Authentication, NPS, VPN & VDI Engineer

Key responsibilities

• Design, deploy, and manage Microsoft Entra ID (Azure Active Directory) hybrid authentication solutions, including Azure AD Connect and cloud-based identity services
• Implement and maintain Network Policy Server (NPS) infrastructure for RADIUS authentication and network access control
• Configure and manage virtual private network (VPN) solutions, ensuring secure remote access whilst maintaining compliance and performance standards
• Deploy, manage, and optimise virtual desktop infrastructure (VDI) environments to support end-user computing requirements
• Perform security assessments and vulnerability testing on authentication systems and network access controls
• Troubleshoot and resolve complex issues related to hybrid authentication, network policies, VPN connectivity, and VDI performance
• Document technical configurations, standard operating procedures, and architectural designs for knowledge retention and compliance
• Collaborate with infrastructure and security teams to ensure alignment with organisational security policies and best practices
• Monitor system performance, implement patches, and perform regular maintenance activities to ensure availability and security
• Provide technical support and guidance to IT staff and end-users regarding authentication, VPN, and VDI services

What we're looking for

• Proven experience (5+ years) in network engineering, infrastructure, or systems administration with hands-on expertise in hybrid authentication solutions
• Deep knowledge of Microsoft Entra ID (Azure AD), including hybrid identity, synchronisation, and modern authentication protocols
• Strong expertise in Network Policy Server (NPS), RADIUS, and network access authentication mechanisms
• Demonstrated experience designing and managing VPN solutions, including site-to-site and remote access VPN technologies
• Solid understanding of virtual desktop infrastructure (VDI) platforms, including configuration and user experience optimisation
• Proficiency with Windows Server operating systems and Active Directory management
• Knowledge of security protocols, SSL/TLS, multi-factor authentication (MFA), and conditional access policies
• Ability to work independently and as part of a team, managing multiple priorities and technical challenges
• Strong problem-solving skills with meticulous attention to detail and commitment to documentation
• Excellent communication skills and the ability to explain technical concepts to non-technical stakeholders
• Relevant certifications such as Microsoft Certified: Identity Engineer Associate, Cisco, CompTIA Network+, or equivalent are advantageous