Senior Cloud Engineer

Department: [SBSS] IT Operations Team

Employment Type: Fixed Term - Full Time

Location: Bristol

Compensation: £55,000 - £60,000 / year

Fixed Term Contract - until March 2028
We're looking for a Senior Cloud Infrastructure Engineer to help shape and strengthen our cloud-first infrastructure. With a focus on Microsoft Azure, you'll take a hands-on role in delivering secure, scalable and high-performing cloud services, while supporting the modernisation of our on-premises environment. Working closely with the Technical Lead and wider infrastructure team, you'll improve cloud governance, security and cost-efficiency, drive continuous improvement, and help evolve our infrastructure to meet future business needs.

You'll also share your expertise and mentor colleagues, building cloud capability across the team and contributing to our long-term digital success.

• Oversee the cloud infrastructure lifecycle, including deployment, configuration, right sizing.
• Manage firewall configurations and network infrastructure to ensure optimal security and performance (Azure and physical).
• Manage VMware environments and Pure Storage solutions to support critical business applications.

• Maintain core network services to ensure reliable connectivity and performance.
• Manage M365 Backup Solution ensuring data integrity and availability.
• Create Azure cost reports for various stakeholders, ensuring Fin Ops capabilities are maintained for all deployed workloads.
• Manage Azure budget alerting configuration
• Collaborate with architecture team to deploy Azure Policy ensuring configuration drift is minimised.
• Administer Intune for device management and security compliance.
• Oversee Sophos management for endpoint protection and threat mitigation.

• Support data centre management to ensure efficient operation and resource utilisation and later migration from DC to Cloud.
• Coordinate penetration test (pen test) remediations to address vulnerabilities and strengthen security.
• Manage Mimecast for email security and archiving solutions.

• Oversee Windows patching, ensuring compliance with organisational security standards.
• Collaborate with the Vulnerability Management Framework and Tenable to identify and remediate vulnerabilities.
• Implement Wiz/Mandiant monitoring for enhanced security visibility.
• Oversee infrastructure patching, including network devices, ensuring timely updates and security compliance.

• Develop and maintain detailed infrastructure documentation, including configurations, processes, and standards.
• Establish and enforce best practices for system management and security protocols.

• Work closely with the Infrastructure Technical Lead and other team members on projects and strategic initiatives.
• Provide technical support, mentorship, and guidance to junior engineers and team members.

• Azure Cloud Operations
  - Wide and deep experience of delivering cloud services in Azure including WAF, VNETs, IaC, Cli scripting.
• Azure Entra and Active Directory
  - Proven experience of supporting a hybrid AD/Entra environment with MFA authentication
• Azure Security Best Practise
• Resilience:
  Ability to overcome obstacles and challenges to achieve operational targets.
• Self-Motivation:
  Proven ability to work independently while also contributing effectively within a team.
• Advanced Communication
  
  Skills:
  
  Exceptional written and verbal communication skills, with the ability to translate complex technical concepts into understandable language for non-technical stakeholders and senior management.
• Organisational
  
  Skills:
  
  Strong ability to manage multiple priorities and meet deadlines.
• Commercial Awareness:
  Understands the impact of infrastructure downtime on business operations and aligns IT solutions accordingly.
• Leadership:
  Ability to lead and mentor junior team members.
• Technical Expertise:
  Extensive experience in IT infrastructure roles, with proficiency in managing both physical and cloud-based systems. Deep technical expertise in networking (LAN/WAN, VPNs, firewalls), servers (Windows, Linux), storage solutions (e.g., VMware, Pure Storage), and virtualisation technologies (e.g., VMware).
• Networking & Security:
  Advanced knowledge of Active Directory, DNS, TCP/IP, and endpoint security tools (Tenable, Wiz/Mandiant, Sophos).
• Backup & Recovery:
  Experience with…