Azure Infrastructure Engineer – Hybrid AD Cleanup & Azure Resource Decommissioning

Azure Infrastructure Engineer – Hybrid AD Cleanup & Azure Resource Decommissioning We are looking for an experienced Microsoft Infrastructure Engineer with strong Azure and Active Directory skills to assist with the decommissioning of our secondary cloud infrastructure. This is not a migration project. The primary on-premises infrastructure will remain in production. The objective is to safely remove the Azure-based secondary infrastructure after validating there are no remaining dependencies. Existing Environment • Hybrid Active Directory • Primary Domain Controller located on-premises • Secondary Domain Controller hosted in Microsoft Azure • Azure Site-to-Site VPN • Azure Virtual Network • Windows Server Domain Controller • Azure networking resources • Additional Azure services that were deployed during the original cloud project ________________________________________ Scope of Work Phase 1 – Discovery & Health Checks Before making any changes, perform a complete assessment of the environment. This should include: • Review Active Directory health • Verify AD replication • Review FSMO roles • Confirm Global Catalog placement • Verify DNS configuration • Check DHCP dependencies (if applicable) • Review Azure VPN dependencies • Review Azure Virtual Network configuration • Identify services still using the Azure Domain Controller • Identify Azure resources that are still required • Produce a short report outlining: o Findings o Risks o Recommended order of work o Rollback plan No production changes should be made until this assessment has been reviewed. ________________________________________ Phase 2 – Domain Controller Demotion Once approved: • Demote the Azure Domain Controller correctly • Clean Active Directory metadata • Remove DNS records where appropriate • Verify replication health • Confirm all authentication continues via the on-premises Domain Controller • Validate no services have been impacted ________________________________________ Phase 3 – Azure Cleanup After successful validation: Review and decommission Azure resources that are no longer required, including where appropriate: • Virtual Machine • Network Interface • Managed Disks • Public IPs • Azure VPN Gateway (if no longer required) • Site-to-Site VPN Connection • Virtual Network (if no longer required) • Recovery Services Vault • Log Analytics Workspace • Resource Groups (where appropriate) • Any other unused Azure resources identified during discovery The objective is to leave only the Azure resources still required for the business. ________________________________________ Deliverables • Pre-change assessment report • Dependency review • Change plan • Rollback plan • Successful DC demotion • Azure resource cleanup • Final documentation • Confirmation that Active Directory is healthy after completion ________________________________________ Required Skills • Microsoft Active Directory • Windows Server • Azure Virtual Machines • Azure Networking • Azure VPN Gateway • Azure Virtual Networks • Azure DNS • Hybrid Identity • PowerShell • Azure Portal • Azure Resource Manager ________________________________________ Ideal Experience We're looking for someone who has previously: • Demoted Domain Controllers in production environments • Decommissioned Azure infrastructure • Worked with hybrid AD environments • Removed legacy Azure deployments • Performed Azure infrastructure clean-up projects ________________________________________ Please Include With Your Proposal 1. Similar projects you have completed. 2. Your experience with Azure hybrid Active Directory. 3. Estimated hours required. 4. Your approach to ensuring no production outage. 5. Your availability. ________________________________________ Notes • Remote access will be provided. • Work should ideally be completed asap