Cloud Security Engineer

Location: Branston

As one of the Best Big Companies to Work For, we have a rich history of loving our customers and looking after our teams. We understand that success is achieved through our people, and we are searching for askilled and experienced Cloud Security Engineer to join our Cyber Security team. The successful candidate will report to the Cyber Security Architect and will be primarily responsible for ensuring the security of our Microsoft Azure environment.

This includes designing, implementing, and maintaining security controls to protect cloud-based systems and data. This role will involve working closely with infrastructure and development teams to ensure secure configurations and compliance with organisational and regulatory requirements. This role is based in our Deeside head office, with a minimum of 2 days per week spent working from here. Specific skills and capabilities we are looking for:
Essential Strong experience in securing Microsoft Azure environments. Knowledge of Azure security services such as Defender for Cloud, Key Vault, and Azure Policy. Ability to design and implement secure configurations for cloud resources. Understanding of identity and access management in cloud environments (e.g. Entra). Experience in designing and implementing secure network architectures in Azure, including Virtual Networks, subnets, and Network Security Groups (NSGs).

Knowledge of Azure Firewall and Web Application Firewall (WAF) for perimeter security. Excellent documentation and communication skills.

Desirable Experience with AWS security best practices and services. Familiarity with cloud compliance frameworks (e.g., CIS Benchmarks, NIST, MCSB). Knowledge of Infrastructure as Code (IaC) security considerations (e.g. Terraform).

Experience with VPN and Express Route configurations for secure hybrid connectivity. Understanding of Zero Trust principles and network segmentation in cloud environments. Familiarity with Azure Private Endpoints and Service Endpoints to secure service access.

Experience with monitoring and incident response in cloud environments. Relevant certifications such as Microsoft Certified:
Azure Security Engineer Associate What to expect from us: 15% discount in Iceland stores 30% discount at Club Individual Restaurants 33 days holiday (including bank holidays) Free onsite parking Onsite electric car charging ports Subsidised staff restaurant and Costa Coffee Christmas vouchers Refer a Friend Scheme Christmas Savings scheme Discounted dry cleaning Long service awards