Senior Azure Cloud Engineer (Contract/Permanent)

About the role

We are seeking a Senior Azure Cloud Engineer to design, build and operate secure Azure environments for our clients in regulated industries. The role involves working across infrastructure, networking, security and platform services while partnering with development teams on migration and modernisation projects.

Key responsibilities

• Design and implement Azure landing zones and hub‑and‑spoke network architectures.
• Manage VNets, NSGs, route tables, VPN/ExpressRoute, private endpoints and DNS across multiple subscriptions.
• Apply governance using Management Groups, Azure Policy, RBAC, resource locks and tagging.
• Configure Azure IAM, Microsoft Entra ID, PIM and secure secret management with Azure Key Vault.
• Deploy and maintain compute and data services such as Azure VMs, App Services, Functions, AKS, Storage, SQL, Cosmos DB, Monitor and Log Analytics.
• Support cost‑optimisation, scalability and resilience of cloud workloads.
• Collaborate with developers to implement CI/CD pipelines, IaC (Terraform, Bicep, ARM) and DevOps best practices.

Required profile

• 5+ years of experience in cloud/infrastructure engineering with strong hands‑on Azure expertise.
• Proven experience designing landing zones, networking, IAM and governance at scale.
• Solid understanding of security, compliance and regulated environments.
• Relevant Azure certifications (Administrator Associate, Solutions Architect Expert, Security Engineer) preferred.

Required skills

• Microsoft Azure (VNets, NSGs, ExpressRoute, Private Endpoints, Azure Policy, RBAC)
• Infrastructure as Code: Terraform, Bicep, ARM templates
• CI/CD tools: Azure DevOps, GitHub Actions
• Kubernetes and containerisation (AKS)
• Azure compute and data services (VMs, App Services, Functions, Storage, SQL, Cosmos DB)
• Monitoring and logging (Azure Monitor, Log Analytics)
• Identity management (Microsoft Entra ID, PIM, Key Vault)