Manager, Microsoft Cloud Services

Overview A global biopharmaceutical company on a mission to Solve On, Incyte follows science to find solutions for patients with unmet medical needs. Through the discovery, development, and commercialization of proprietary therapeutics, Incyte has established a portfolio of first-in-class medicines for patients and a strong pipeline of products in Hematology, Oncology and Inflammation and Autoimmunity Headquartered in Wilmington, Delaware, Incyte has operations in North America, Europe, and Asia. Role Summary The Manager, Microsoft Cloud Services is accountable for the strategy, architecture, governance, security, lifecycle, financial stewardship, and engineering direction of the organization’s Microsoft cloud environment, including Microsoft Azure, Microsoft Intune, Microsoft Entra ID, Exchange Online, and core Microsoft 365 tenant services. This technical management role leads a small team, establishes platform standards, makes architecture decisions, and ensures the environment is secure, scalable, resilient, compliant, cost-effective, and aligned with business priorities. The role owns platform strategy and the control plane rather than routine infrastructure operations. Standard activities such as individual server deployments, daily monitoring, backup execution, routine patching, and first-line operational support are performed by Infrastructure Operations or managed service providers. The Manager defines the architecture, guardrails, service expectations, and governance under which those teams operate and provides senior technical escalation for platform-wide issues and risk decisions. SharePoint Online, Microsoft Teams, Power Apps, Power Automate, and the broader Power Platform suite are outside the scope of this role and are owned by separate service teams.

Azure Platform Strategy & Architecture

Own the Azure strategy and roadmap and translate business, security, compliance, and infrastructure requirements into a prioritized platform plan. Define and govern the Azure enterprise architecture, including management groups, subscriptions, landing zones, resource organization, naming and tagging, Azure Policy, RBAC, shared services, connectivity, DNS, private endpoints, logging architecture, and hybrid integration. Serve as the senior technical authority for cloud service selection, architecture patterns, resilience, workload placement, integration, and modernization decisions. Review and approve significant Azure designs and exceptions to ensure alignment with enterprise architecture, cybersecurity, regulatory, supportability, and cost requirements. Establish reusable reference architectures and engineering standards that enable secure, consistent, and efficient cloud adoption.

Microsoft Intune & Endpoint Management

Oversees the Intune strategy, architecture, and governance, of the Intune platform and conditional access policies. Define standards for securing the Intune platform working with IT Security and Microsoft to understand the platform roadmap. Provide technical direction to endpoint operations teams and End User servers. Excluding routine device support, software fulfillment, and day-to-day endpoint administration from this role.

Microsoft Entra ID & Identity Governance

Own the Entra ID architecture and governance model for workforce identities, guest identities, privileged identities, enterprise applications, application registrations, service principals, and managed identities. Define and govern identity security controls, including Conditional Access, multifactor authentication, passwordless authentication, Privileged Identity Management, Identity Protection, access reviews, and entitlement management. Direct identity lifecycle engineering for joiner, mover, and leaver processes, automated provisioning and deprovisioning, role-based access, group governance, and integration with authoritative systems. Establish application authentication and