Senior Cloud Engineer

Senior Cloud Engineer

Department: SBSS IT Operations Team

Employment Type: Permanent - Full Time

Location: Bristol

Reporting To: Matthew Glanville

Compensation: £61,000 - £68,000 / year

Description

We are recruiting for a Senior Cloud Engineer to join our Infrastructure Operations team in Bristol. The Senior Cloud Engineer is responsible for the implementation and maintenance of the organisation's cloud infrastructure, with a focus on Azure, ensuring optimal performance, security, and scalability.

This role involves hands-on technical work across cloud platforms while contributing to the management and modernisation of the on-prem infrastructure. Working closely with the Infrastructure Manager, Technical Lead, and broader infrastructure team, the Senior Cloud Engineer supports the transition to a cloud-first operating model, driving continuous improvement in cloud operations.

They play a key role in enhancing cloud governance, security, and cost-efficiency while supporting infrastructure evolution to meet future business needs. Additionally, they provide mentorship and guidance to colleagues, helping build internal capability in cloud services and fostering technical growth within the team. By proactively advancing cloud maturity and integrating cloud and on-prem strategies, the Senior Cloud Engineer ensures operational excellence and supports the organisation's long-term digital success.

What you'll be responsible for: Infrastructure Management

• Oversee the cloud infrastructure lifecycle, including deployment, configuration, right sizing.
• Manage firewall configurations and network infrastructure to ensure optimal security and performance (Azure and physical).
• Manage VMware environments and Pure Storage solutions to support critical business applications.

Core Services Oversight

• Maintain core network services to ensure reliable connectivity and performance.
• Manage M365 Backup Solution ensuring data integrity and availability.
• Create Azure cost reports for various stakeholders, ensuring FinOps capabilities are maintained for all deployed workloads.
• Manage Azure budget alerting configuration.
• Collaborate with architecture team to deploy Azure Policy ensuring configuration drift is minimised.
• Administer Intune for device management and security compliance.
• Oversee Sophos management for endpoint protection and threat mitigation.

Data Centre and Infrastructure Operations

• Support data centre management to ensure efficient operation and resource utilisation and later migration from DC to Cloud.
• Coordinate penetration test (pen test) remediations to address vulnerabilities and strengthen security.
• Manage Mimecast for email security and archiving solutions.

Patching and Vulnerability Management

• Oversee Windows patching, ensuring compliance with organisational security standards.
• Collaborate with the Vulnerability Management Framework and Tenable to identify and remediate vulnerabilities.
• Implement Wiz/Mandiant monitoring for enhanced security visibility.
• Oversee infrastructure patching, including network devices, ensuring timely updates and security compliance.

Documentation and Best Practices

• Develop and maintain detailed infrastructure documentation, including configurations, processes, and standards.
• Establish and enforce best practices for system management and security protocols.

Collaboration and Support

• Work closely with the Infrastructure Technical Lead and other team members on projects and strategic initiatives.
• Provide technical support, mentorship, and guidance to junior engineers and team members.

What you'll need:

Essential:

• 3+ years of experience in IT infrastructure roles.
• Azure Cloud Operations - wide and deep experience of delivering cloud services in Azure including WAF, VNETs, IaC, Cli scripting.
• Azure Entra and Active Directory - proven experience of supporting a hybrid AD/Entra environment with MFA authentication.
• Azure Security Best Practise.
• Technical Expertise: Extensive experience in IT infrastructure roles, with proficiency in managing both physical and cloud-based systems. Deep technical expertise in networking (LAN/WAN, VPNs, firewalls), servers (Windows, Linux), storage solutions (e.g., VMware, Pure Storage), and virtualisation technologies (e.g., VMware).
• Networking & Security: Advanced knowledge of Active Directory, DNS, TCP/IP, and endpoint security tools (Tenable, Wiz/Mandiant, Sophos).
• Backup & Recovery: Experience with Commvault or similar solutions.
• Resilience: Ability to overcome obstacles and challenges to achieve operational targets.
• Self-Motivation: Proven ability to work independently while also contributing effectively within a team.
• Advanced Communication Skills: Exceptional written and verbal communication skills, with the ability to translate complex technical concepts into understandable language for non-technical stakeholders and senior management.
• Organisational Skills: Strong ability to manage multiple priorities and meet deadlines.
• Commercial Awareness: Understands the impact of infrastructure downtime on business operations and aligns IT solutions accordingly.
• Leadership: Ability to lead and mentor junior team members.

Desirable:

• Knowledge/experience of CI/CD Pipelines, SRE Automation, Azure FinOps.
• Regulatory Knowledge: Experience in regulated environments (e.g., PCI, FCA compliance).
• Advanced Networking: Knowledge of Cisco Certified Network Professional (CCNP) and Cisco Certified Network Associate (CCNA).
• Disaster Recovery: Familiarity with disaster recovery (DR) and business continuity (BCP).
• Project Management: Experience in managing complex infrastructure projects.
• Security Certifications: CISSP or equivalent IT security certifications.
• Advanced VMware Skills: VMware Certified Advanced Professional (VCAP).
• Automation & Scripting: Experience with automation tools and scripting languages (e.g., PowerShell, Bash).

Qualifications:

Essential:

• Microsoft Certified: Azure Administrator Associate.
• CompTIA Network+
• CompTIA Security+
• ITIL Foundation
• Microsoft Certified Solutions Associate (MCSA) / Microsoft Certified Solutions Expert (MCSE)

Desirable:

• VMware Certified Professional (VCP)
• Microsoft Certified: Azure Solutions Architect Expert
• Certified Information Systems Auditor (CISA)
• VMware Certified Advanced Professional (VCAP)
• Certified in the Governance of Enterprise IT (CGEIT)
• Red Hat Certified Engineer (RHCE)
• Certified Cloud Security Professional (CCSP)
• M365 / Azure Certification
• Certified Information Systems Security Professional (CISSP)

Our Benefits:

• Hybrid working - 2 days in the office and 3 days working from home
• 25 days annual leave, rising to 27 days over 2 years' service and 30 days after 5 years' service. Plus bank holidays!
• Discretionary annual bonus
• Pension scheme - 5% employee, 6% employer
• Flexible working - we will always consider applications for those who require less than the advertised hours
• Flexi-time
• Healthcare Cash Plan - claim cashback on a variety of everyday healthcare costs
• Electric vehicle - salary sacrifice scheme
• 100's of exclusive retailer discounts
• Professional wellbeing, health & fitness app - Wrkit
• Enhanced parental leave, including time off for IVF appointments
• Religious bank holidays - if you don't celebrate Christmas and Easter, you can use these annual leave days on other occasions throughout the year.
• Life Assurance - 4 times your salary
• 25% Car Insurance Discount
• 20% Travel Insurance Discount
• Cycle to Work Scheme
• Employee Referral Scheme
• Community support day