Azure Cloud Engineer

Azure Cloud Engineer

Department: Platform Delivery

Employment Type: Permanent - Full Time

Location: London

Reporting To: Phil Miller

Description

As an Azure Infrastructure Cloud Engineer in the Platform Delivery team, you will play a key role in managing, evolving, and securing the Azure cloud infrastructure that underpins the OneView platform. You'll be responsible for ensuring the platform is secure, highly available, performant, and scalable as client usage and product capabilities continue to grow.

You'll work closely with developers, data engineers, DevOps, and wider business teams to ensure the Azure environment is reliable, well-governed, and aligned with product and organisational goals. Alongside core infrastructure responsibilities, you'll support operational delivery, security compliance, and the ongoing evolution of the platform.

Key Responsibilities

Azure Platform Management

• Manage and maintain all Azure cloud infrastructure supporting the OneView platform, including Azure SQL Databases, App Services, Virtual Machines, Virtual Desktops, and associated networking components (virtual networks, firewalls, NSGs, routing).
• Ensure the Azure environment is secure, highly available, optimised for performance, and scalable to meet growing demand.
• Oversee backups, patching, updates, monitoring, and disaster recovery processes for critical systems.
• Design, build, and maintain infrastructure using Infrastructure as Code (Bicep, ARM templates, and/or Terraform).
• Implement and maintain monitoring, logging, and alerting using Azure Monitor and Log Analytics.
• Troubleshoot and resolve complex infrastructure, networking, and platform issues.

Security & Compliance

• Uphold strong security practices and compliance standards across the Azure platform
• Administer identity and access management using Microsoft Entra ID (Azure Active Directory), including RBAC and Privileged Identity Management (PIM).
• Ensure the platform adheres to ISO 27001 and other relevant security and information governance frameworks.
• Conduct regular security reviews, audits, and risk assessments, addressing findings and implementing improvements.
• Implement and maintain security controls such as firewall rules, network security groups, vulnerability patching, and access policies.
• Work with internal stakeholders to ensure security requirements are embedded into platform design and delivery.

Platform delivery, support & collaboration

• Provide 2nd/3rd line technical support for Azure infrastructure and cloud services.
• Support internal IT operations including laptop and device setup, software licensing, and administration of Microsoft 365 services (Exchange, Teams, SharePoint, etc.).
• Manage IT onboarding for new joiners (account creation, device provisioning) and off-boarding for leavers.
• Support client-side IT teams by resolving connectivity, access, or integration issues related to OneView.
• Participate in internal and client support meetings, clearly communicating technical updates and issues to non-technical stakeholders.
• Collaborate with colleagues across engineering, data, product, and project teams to ensure platform changes and deployments are delivered smoothly.

Platform evolution & strategy

• Contribute to the ongoing evolution of the OneView platform and its Azure architecture.
• Work with development and DevOps teams to improve deployment processes, including CI/CD pipelines, infrastructure-as-code practices, and testing environments.
• Identify opportunities to improve platform reliability, security, performance, and cost efficiency.
• Monitor emerging Azure technologies and best practices, recommending improvements where appropriate.
• Take an active role in shaping the Azure platform roadmap and ensuring it continues to meet both internal and client needs.

What are we looking for?

• A degree in Computer Science, Engineering, or a related technical field, or equivalent practical experience.
• 3+ years' professional experience in Azure infrastructure, cloud engineering, or a similar role.
• Strong technical expertise in:
  Microsoft Azure infrastructure and core services.
  Azure networking and security concepts.
  Infrastructure as Code (Terraform, Bicep, or ARM).
  Identity and access management with Azure AD / Entra ID.
  Monitoring, logging, and incident troubleshooting.
  Experience working in environments with strong security and compliance requirements
• Clear communication and collaboration skills, with the ability to explain technical concepts to non-technical stakeholders.
• A continuous improvement mindset and a sense of ownership over platform quality and reliability.

Bonus points if you have:

• Experience working with public sector organisations (such as local councils or other government bodies).
• Familiarity with data privacy, security, and information governance.
• Experience handling sensitive data / knowledge of GDPR.
• Experience with CI/CD pipelines (Azure DevOps, GitHub Actions).
• Knowledge of Kubernetes / AKS.

Location - This is a hybrid role based in our office in London (Borough). You would be expected to be able to work from the office at least 1-2 days per week. Some travel is also required for on-site client engagements as needed.

What can we offer you?

• Competitive salary reviewed annually
• Work for a passionate, mission-driven company solving society's big problems
• Work flexible hours around life commitments with a focus on delivering company value rather than hours worked
• Ability to work remotely (excluding face-to-face Team Meetings and client meetings)
• Training and development opportunities
• 25 days annual leave (plus bank holidays)
• Company pension
• Private medical insurance
• Generous enhanced parental leave policies
• Cycle to work scheme
• Flu Vaccinations
• Eye Test and contribution towards Glasses for VDU use
• Employee Assistance Programme
  • Mental health and wellbeing support
  • Remote GP access
  • Counselling/therapy
  • Physiotherapy
  • Medical second opinions