> Markdown version of [/jobs/ext/2304083-cloud-engineer](https://www.wearedevelopers.com/jobs/ext/2304083-cloud-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cloud Engineer - **Company:** Symmetric Headhunting - **Location:** Lincoln, UK - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Build Automation, Microsoft Azure, Microsoft Online Services, Cloud Computing, Cloud Engineering, Cyber Security, Information Leak Prevention, Multi-Factor Authentication, Identity and Access Management, Microsoft Security Essentials, Microsoft Office, Windows PowerShell, Azure Active Directory, Microsoft SharePoint, EndPointSecurity, Microsoft InTune, Infrastructure Automation Frameworks, Bicep, Graphql, Terraform - **Published:** August 30, 2026 - **Apply:** https://www.collegerecruiter.com/job/2825797319-cloud-engineer ## About the Role * Demonstrable experience configuring and securing Microsoft 365 and Azure in production, not first-line support exposure. * Real depth in Microsoft Entra ID, Conditional Access and identity and access management. * Hands-on experience with Microsoft security tooling such as Defender, Sentinel, Purview or Intune. * Strong PowerShell scripting and automation, ideally with Graph API. * A track record of cloud governance, tenant hardening and operational best practice. * Sound judgement under pressure, and clear communication with technical and non-technical stakeholders. Nice to have * Microsoft certifications such as SC-200, SC-300, SC-100, AZ-500, AZ-104, MS-102 or MS-500. * Infrastructure as Code with Bicep or Terraform. * FinOps and cloud financial management. * Experience in an ITIL service management environment. ## Description This is a hands-on, cloud-first engineering role for someone who builds and secures Microsoft 365 and Azure, rather than someone who supports it from a service desk. You will own the configuration, hardening and continual improvement of our tenant, act as the senior escalation point for complex cloud and identity issues, and set the standard for how our platforms are run. If your strongest work is configuring Conditional Access policies, deploying and tuning Microsoft Defender, standing up Sentinel, automating with PowerShell and Infrastructure as Code, and driving Secure Score in the right direction, this role is built for you. What you will do * Configure, secure and optimise Microsoft 365 services across Exchange Online, Teams, SharePoint Online and OneDrive. * Administer and harden Azure infrastructure, with a security-first approach throughout. * Own identity and access: Microsoft Entra ID, Conditional Access, and MFA policy design and enforcement. * Implement and manage Microsoft security tooling: Defender for Endpoint, Defender for Office 365, Purview and data loss prevention, and Intune endpoint management. * Act as the senior escalation point for complex M365, Azure and identity incidents, leading root cause investigation and permanent fixes. * Build automation for provisioning, configuration and operations using PowerShell, Graph API and Infrastructure as Code. * Own governance, tenant standards and configuration baselines, and champion FinOps for cost visibility and efficiency. * Lead M365 and Azure migrations, upgrades and deployments, working closely with our Network and Cyber Security Engineers to keep everything inside our security controls. * Provide technical leadership and mentoring to Cloud Engineers, and shape the cloud roadmap. ## Related Videos - [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies) - [Infrastructure as Code: The Developer's Secret Weapon](https://www.wearedevelopers.com/videos/1221-infrastructure-as-code-the-developer-s-secret-weapon) - [Back(end) to the Future: Embracing the continuous Evolution of Infrastructure and Code](https://www.wearedevelopers.com/videos/440-back-end-to-the-future-embracing-the-continuous-evolution-of-infrastructure-and-code) - [Putting the Graph In GraphQL With The Neo4j GraphQL Library](https://www.wearedevelopers.com/videos/257-putting-the-graph-in-graphql-with-the-neo4j-graphql-library) - [Implementing Feature Environments with AWS and Terraform](https://www.wearedevelopers.com/videos/531-implementing-feature-environments-with-aws-and-terraform) - [Enabling automated 1-click customer deployments with built-in quality and security](https://www.wearedevelopers.com/videos/83-enabling-automated-1-click-customer-deployments-with-built-in-quality-and-security) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)