Infrastructure and Cloud Engineer (L3

Job title: Infrastructure and Cloud Engineer (L3)

Reporting to: Senior IT Service Delivery Manager

Working hours: 10am-6pm, Monday–Friday (hybrid - 4 days in the office)

Location: White Cube Bermondsey (with other locations as required)

White Cube was set up by Jay Jopling in 1993 as a project room for contemporary art. The gallery has since grown into one of the most influential commercial galleries in the world, representing internationally renowned artists such as Georg Baselitz, Tracey Emin, Antony Gormley, Mona Hatoum, Anselm Kiefer, Liu Wei, Park Seo Bo, Doris Salcedo and Jeff Wall.

White Cube’s exhibition programme extends across locations in London, Hong Kong, Paris, New York, Seoul and online.

We are seeking an experienced and proactive Senior Infrastructure and Cloud Platform Engineer to act as the technical lead for White Cube’s cloud and infrastructure estate. This is a senior third-line (L3) role, working alongside our existing L3 engineer to remove single points of failure, mature our cloud platform, and lead the migration of remaining on-premises workloads into Microsoft Azure and Microsoft 365.

The role is pivotal to White Cube’s technology strategy. The successful candidate will own the design, security, resilience and day-two operations of our Microsoft-first cloud stack - including Microsoft 365, Entra , Intune, Azure Virtual Desktop, Microsoft Sentinel and our wider Azure footprint - while also providing senior technical input across our AWS workloads, network, identity and endpoint platforms. The role will mentor the Service Delivery team, shift resolution left through knowledge transfer and Sys Aid, and help retire legacy on-premise systems on plan.

• Act as a technical authority for White Cube’s Microsoft cloud platform
  - Microsoft 365, Entra , Intune, Autopilot, Autopatch, Azure Virtual Desktop, Microsoft Sentinel SIEM and the wider Azure estate - ensuring resilience, security and availability.
• Lead the migration of remaining on-premise workloads to cloud, including VMware vCentre / Horizon to Azure Virtual Desktop, on-premise Active Directory and domain controllers to Entra , Cisco ASA to a Zero Trust Network Access model, Print Servers to Universal Print, and the decommissioning of legacy file and document platforms.
• Own day-two operations and engineering for our AWS workloads, ensuring our cloud-hosted applications remain secure, well-governed and cost-optimised.
• Manage and harden identity, endpoint and security platforms
  - Entra , Intune (Windows), JAMF (macOS), Sentinel One EDR, DNSFilter and Bitwarden - with a strong focus on conditional access, Zero Trust and audit-readiness.
• Provide senior third-line escalation support, partner with the existing L3 engineer to eliminate single points of failure, and act as a named owner / admin across critical services.
• Design and implement automation and infrastructure-as-code (Power Shell, Bicep / ARM, Terraform or similar) for provisioning, configuration and patching across cloud and endpoint estates.
• Implement monitoring, alerting and performance tuning across the cloud and network estate - including the Meraki SD-WAN - and integrate observability into Microsoft Sentinel and Sys Aid.
• Mentor and upskill the Service Delivery team, embed knowledge in Sys Aid, and shift incident resolution left so that more issues are resolved at first touch rather than escalated.
• Contribute to the IT governance framework - standards, runbooks, RACI ownership, change control and vendor management - in line with ITIL 4 service management practice.
• Stay current with Microsoft and AWS platform innovations, and recommend improvements to architecture, cost utilisation and security posture.

• Proven senior engineering experience in a Microsoft-first cloud environment, ideally including a hybrid-to-cloud migration programme.
• Deep, hands‑on expertise across Microsoft 365 (Exchange Online, SharePoint, One Drive, Teams), Entra  (conditional access, identity governance), and Microsoft Intune / Autopilot for Windows endpoint management.
• Strong Azure engineering skills
  - IaaS, PaaS, networking, identity,…