Fixed Term Contract - until March 2028
We’re looking for a Senior Cloud Infrastructure Engineer to help shape and strengthen our cloud-first infrastructure. With a focus on Microsoft Azure, you’ll take a hands-on role in delivering secure, scalable and high-performing cloud services, while supporting the modernisation of our on-premises environment. Working closely with the Technical Lead and wider infrastructure team, you’ll improve cloud governance, security and cost-efficiency, drive continuous improvement, and help evolve our infrastructure to meet future business needs. You’ll also share your expertise and mentor colleagues, building cloud capability across the team and contributing to our long-term digital success.
Infrastructure Management
- Oversee the cloud infrastructure lifecycle, including deployment, configuration, right sizing.
- Manage firewall configurations and network infrastructure to ensure optimal security and performance (Azure and physical).
- Manage VMware environments and Pure Storage solutions to support critical business applications.
Core Services Oversight
- Maintain core network services to ensure reliable connectivity and performance.
- Manage M365 Backup Solution ensuring data integrity and availability.
- Create Azure cost reports for various stakeholders, ensuring FinOps capabilities are maintained for all deployed workloads.
- Manage Azure budget alerting configuration
- Collaborate with architecture team to deploy Azure Policy ensuring configuration drift is minimised.
- Administer Intune for device management and security compliance.
- Oversee Sophos management for endpoint protection and threat mitigation.
Data Centre and Infrastructure Operations
- Support data centre management to ensure efficient operation and resource utilisation and later migration from DC to Cloud.
- Coordinate penetration test (pen test) remediations to address vulnerabilities and strengthen security.
- Manage Mimecast for email security and archiving solutions.
Patching and Vulnerability Management
- Oversee Windows patching, ensuring compliance with organisational security standards.
- Collaborate with the Vulnerability Management Framework and Tenable to identify and remediate vulnerabilities.
- Implement Wiz/Mandiant monitoring for enhanced security visibility.
- Oversee infrastructure patching, including network devices, ensuring timely updates and security compliance.
Documentation and Best Practices
- Develop and maintain detailed infrastructure documentation, including configurations, processes, and standards.
- Establish and enforce best practices for system management and security protocols.
Collaboration and Support
- Work closely with the Infrastructure Technical Lead and other team members on projects and strategic initiatives.
- Provide technical support, mentorship, and guidance to junior engineers and team members.
- Azure Cloud Operations - Wide and deep experience of delivering cloud services in Azure including WAF, VNETs, IaC, Cli scripting.
- Azure Entra and Active Directory - Proven experience of supporting a hybrid AD/Entra environment with MFA authentication
- Azure Security Best Practise
- Resilience: Ability to overcome obstacles and challenges to achieve operational targets.
- Self-Motivation: Proven ability to work independently while also contributing effectively within a team.
- Advanced Communication Skills: Exceptional written and verbal communication skills, with the ability to translate complex technical concepts into understandable language for non-technical stakeholders and senior management.
- Organisational Skills: Strong ability to manage multiple priorities and meet deadlines.
- Commercial Awareness: Understands the impact of infrastructure downtime on business operations and aligns IT solutions accordingly.
- Leadership: Ability to lead and mentor junior team members.
- Technical Expertise: Extensive experience in IT infrastructure roles, with proficiency in managing both physical and cloud-based systems. Deep technical expertise in networking (LAN/WAN, VPNs, firewalls), servers (Windows, Linux), storage solutions (e.g., VMware, Pure Storage), and virtualisation technologies (e.g., VMware).
- Networking & Security: Advanced knowledge of Active Directory, DNS, TCP/IP, and endpoint security tools (Tenable, Wiz/Mandiant, Sophos).
- Backup & Recovery: Experience with Commvault or similar solutions.
- Collaboration & Escalation: Strong team collaboration and ability to handle complex technical issues.
- Hybrid working – 2 days in the office and 3 days working from home
- 25 days annual leave, rising to 27 days over 2 years’ service and 30 days after 5 years’ service. Plus bank holidays!
- Discretionary annual bonus
- Pension scheme – 5% employee, 6% employer
- Flexible working – we will always consider applications for those who require less than the advertised hours
- Flexi-time
- Healthcare Cash Plan – claim cashback on a variety of everyday healthcare costs
- Electric vehicle – salary sacrifice scheme
- 100’s of exclusive retailer discounts
- Professional wellbeing, health & fitness app - Wrkit
- Enhanced parental leave, including time off for IVF appointments
- Religious bank holidays – if you don’t celebrate Christmas and Easter, you can use these annual leave days on other occasions throughout the year.
- Life Assurance - 4 times your salary
- 25% Car Insurance Discount
- 20% Travel Insurance Discount
- Cycle to Work Scheme
- Employee Referral Scheme
- Community support day