Senior Cloud Engineer, Cloud COE
Role details
Job location
Tech stack
Job description
The Senior Cloud Engineer - Cloud COE is a hands-on engineering role responsible for building, automating and operating Azure cloud platforms. Reporting to Tech Lead - Cloud COE, this role focuses on Terraform-led infrastructure, Azure platform engineering, AKS, AVS, Azure Arc and BAU operations.
Core responsibilities
Cloud Engineering & Platform Delivery
-
Build, configure, and manage Azure infrastructure services including compute, storage, networking, backup, and platform services
-
Support deployment of enterprise landing zones, shared services, and workload environments
-
Implement cloud solutions aligned with architecture patterns and enterprise standards
-
Work closely with Tech Lead and Architecture teams to deliver strategic cloud initiatives Infrastructure-as-Code (Terraform Focus)
-
Develop and maintain Terraform modules and reusable infrastructure components
-
Deliver infrastructure provisioning via CI/CD pipelines (GitHub / Azure DevOps)
-
Ensure infrastructure deployments are consistent, version-controlled, and policy-compliant
-
Manage drift detection, environment consistency, and release governance Azure Core Platform Skills
-
Hands-on engineering across:
-
Subscriptions, Management Groups, RBAC, Policy
-
Virtual Machines, Storage, Backup, DR
-
Azure Monitor, Log Analytics
-
Private Endpoints and secure service exposure
-
Implement secure-by-design configurations aligned to enterprise cloud controls Azure Kubernetes Service (AKS)
-
Deploy, configure, and support AKS clusters
-
Manage cluster scaling, patching, upgrades, and networking integration
-
Support container platform operations including monitoring and reliability
-
Collaborate with application teams for containerised workload deployments Azure VMware Solution (AVS)
-
Support AVS environments including connectivity, operations, and monitoring
-
Assist with workload migrations and integration with Azure-native services
-
Work with infrastructure teams to ensure stable hybrid VMware-cloud operations Azure Arc & Hybrid Cloud
-
Implement and manage Azure Arc-enabled servers and services
-
Apply governance, policy, and monitoring across hybrid estates
-
Support consistency of operations across on-prem, AVS, and Azure-native environments Cloud Networking & Connectivity
-
Configure and manage:
-
VNets, NSGs, UDRs
-
VPN Gateway, ExpressRoute
-
Private Endpoints and DNS
-
Troubleshoot hybrid connectivity and latency issues
-
Support secure network design and segmentation Identity, Access & Security
-
Support Microsoft Entra ID (Azure AD) configurations and integrations
-
Implement RBAC, SSO, and least privilege access models
-
Assist with security controls, compliance policies, and remediation activities Monitoring, BAU & Incident Management
-
Support business-as-usual (BAU) cloud operations across environments
-
Monitor cloud services using Azure Monitor, Log Analytics, and alerting tools
-
Investigate incidents, perform root cause analysis, and implement fixes
-
Maintain platform stability, uptime, and service performance Collaboration & Engineering Excellence
-
Work closely with:
-
Cloud COE team
-
Platform Engineering
-
Security and Architecture teams to contribute to internal Tech Architecture Board
-
Contribute to reusable templates, standards, and best practices
-
Drive automation-first mindset and continuous improvement What to expect when you join our firm
-
Hybrid working and reasonable accommodations
-
Generous holiday policies
-
Excellent health and wellbeing benefits
-
Paid volunteer time
-
Professional development and certifications
-
Parental leave benefits
-
Access to Headspace
-
Employee events and networking opportunities
-
Subsidised lunch allowance
Requirements
Must have skills
-
5+ years of hands-on cloud engineering experience with Microsoft Azure
-
Strong Terraform (IaC) experience - module design, pipelines, governance
-
Deep knowledge of core Azure services (compute, storage, networking, identity)
-
Hands-on experience with:
-
Azure Kubernetes Service (AKS)
-
Azure networking (VNet, DNS, Private Endpoints, ExpressRoute/VPN)
-
Microsoft Entra ID / RBAC
-
Experience supporting BAU operations, incident management, and troubleshooting
-
Strong scripting skills (PowerShell, Bash, or Python)
-
Experience with CI/CD pipelines (GitHub / Azure DevOps)
-
Understanding of cloud security and governance best practices
-
Experience working in enterprise-scale environments Nice to have skills
-
Experience with Azure VMware Solution (AVS)
-
Experience with Azure Arc (hybrid governance and management)
-
Exposure to FinOps / cost optimization practices
-
Certifications:
-
AZ-104 (Azure Administrator)
-
AZ-305 (Azure Architect)
-
AZ-700 (Networking)
-
Terraform certification
-
Experience in financial services or regulated environments Supervisory responsibilities
-
No direct line management (individual contributor role with high technical ownership)