Cloud Infrastructure Engineer

Job Description
hackajob is collaborating with Ordnance Survey to connect them with exceptional professionals for this role.

Cloud Infrastructure Engineer

• Fulltime | £43,918.00 - £51,238.00 (dependent on experience)

About OS

Join us in building the cloud platform that powers the geospatial data used across government, business, and everyday life.

Ordnance Survey is the national mapping agency for Great Britain, delivering worldclass geospatial data and services that underpin innovation and decision making across government, business, and everyday life. Our engineering teams build and operate the cloud platforms and tools that enable OS to deliver accurate, reliable data at scale — helping millions of people and organisations every day.

We’re passionate about using modern technology to make a meaningful impact, and we’re looking for engineers who share that enthusiasm.

Our Principles

At OS, how we work matters just as much as what we deliver. Throughout our hiring process we will assess competence assessing alignment in how you:

•
Clear the path – Cut the noise, simplify and remove blockers so work can move at pace

• Seek the story – Listen fully, build understanding, fact‑check assumptions and speak up

• Do what matters – Focus on value, make deliberate stop/start/continue decisions, and recognise the contribution of others

About the role

We are looking for a skilled Cloud Infrastructure Engineer to play a key role in designing and implementing Azure Landing Zones (ALZ) within a modern, enterprise-scale environment.

This is an exciting opportunity to help shape a secure, scalable, and compliant cloud platform, enabling teams to deliver services confidently and efficiently in Azure.

You will work across engineering, security, and platform teams to build reusable infrastructure patterns, automate deployments, and embed good practices aligned with Microsoft’s Cloud Adoption Framework.

Important

Please note that due to the nature of this work - this role is conditional on holding or subsequently passing National Security Vetting SC Clearance prior to appointment.

Key Responsibilities

• Develop and maintain Infrastructure as Code (IaC) using Bicep and Terraform

• Automate platform deployments via CI/CD pipelines (Azure Dev Ops)

• Configure and manage management groups, subscriptions, and governance controls

• Maintain networking components including hub-and-spoke, Azure Firewall, and private connectivity

• Embed security and compliance controls (e.g., RBAC, PIM, policies, Defender for Cloud)

• Collaborate with security, operations, and application teams to onboard workloads

• Troubleshoot platform issues and continuously improve reliability, governance and security

• Management and security hardening of Virtual Machines using Desired State Configuration

• Maintenance of centralised tooling to build Virtual Machine images using Image Builder / Packer

Experience using Microsoft Azure

• Knowledge of:
  Azure networking (vNets, DNS, Firewall, Private Endpoints)

Identity & access management (Entra , RBAC, PIM)

• Governance (Azure Policy, Defender for Cloud, cost management)

Solid troubleshooting and problem-solving skills

• Ability to write user friendly documentation for an engineering audience

Desirable

• Hands-on experience with Azure Landing Zones or enterprise-scale cloud environments

• Experience with Azure Landing Zone Accelerator or CAF implementation

• Knowledge of security frameworks (NCSC guidance, CIS benchmarks, ISO

Scripting skills (Power Shell, Azure CLI, or Python)

• Understanding of DNS, hybrid connectivity, or enterprise networking

Azure certifications (e.g., AZ-104, AZ-305, AZ-500, AZ-700)

• Experience of Windows and Linux provisioning and security hardening

Enthusiasm for learning new skills and staying up to date

• Thriving in an agile, collaborative environment

Find out more

If you’d like to learn more about the role and the people with whom you’d be working, we are hosting two open sessions on Teams:

Session 1:
Friday 26 June - 12:30-13:10

Session 2:
Wednesday 1 July 17:30-18:10

These sessions are informal, completely optional, drop in when you can, and do not form part of the interview process. They are an opportunity to learn more and to ask questions. If you…