Cloud Platform Engineer; Azure

Location:

Portsmouth, 1 to 2 days onsite per week, remainder remote

Contract:

19 October 2026 to 19 January 2027

Security Clearance:
Active SC required

We are looking for an experienced Cloud Platform Engineer to support, maintain and develop enterprise cloud and hybrid platform services within a secure defence environment.

The role focuses on Microsoft Azure, Entra , Azure Landing Zones, Infrastructure as Code (IaC), automation and cloud governance.

You will support the transition from legacy on-premises infrastructure to secure, standardised cloud and hybrid platforms, ensuring operational stability, security and compliance.

• Support and manage Azure Landing Zones, including subscriptions, management groups, RBAC, policies and governance.
• Develop and maintain Infrastructure as Code using Terraform, Bicep, Power Shell and Azure CLI.
• Administer Microsoft Entra , including Conditional Access, Privileged Identity Management (PIM), identity governance and enterprise applications.
• Support hybrid identity integration between Entra  Active Directory Domain Services (AD DS).
• Implement cloud monitoring, alerting, security controls and platform resilience.
• Optimise Azure costs through resource tagging, budget alerts, automation and standardised configurations.
• Develop reusable automation scripts, IaC modules and technical documentation.
• Collaborate with Architecture, Security, Network, Infrastructure and Identity teams.
• Provide technical expertise for cloud migration, adoption and modernisation projects.
• Ensure platform changes comply with security, governance and change management processes.

• Strong hands-on experience with Microsoft Azure in enterprise environments.
• Experience supporting and managing Azure Landing Zones.
• Strong Microsoft Entra , including RBAC, Conditional Access and identity governance.
• Practical experience with Infrastructure as Code, particularly Terraform or Bicep.
• Power Shell scripting and automation experience.
• Knowledge of Azure subscriptions, management groups, policies and governance.
• Understanding of hybrid identity environments and Active Directory integration.
• Experience with cloud monitoring, logging, alerting and operational support.
• Experience working within structured change management and security governance frameworks.
• Active SC security clearance.
• Azure Dev Ops and CI/CD pipeline automation.
• Exchange Online and Microsoft 365 services.
• Microsoft Defender and Microsoft Purview.
• Azure Monitor and cloud security tooling.
• Experience supporting cloud migration and modernisation programmes.
• Understanding of NCSC security principles and secure cloud platform operations.

You will be a hands-on Cloud Platform Engineer with strong technical troubleshooting skills and experience supporting secure enterprise environments.

You should be comfortable working across technical teams, taking ownership of platform improvements and delivering reliable, well-documented solutions.