> Markdown version of [/jobs/ext/3134379-senior-cloud-architect-azure-aks-gitops-hybrid](https://www.wearedevelopers.com/jobs/ext/3134379-senior-cloud-architect-azure-aks-gitops-hybrid). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Cloud Architect: Azure, AKS & GitOps (Hybrid)

- **Company:** Internal Audit Connections Ltd
- **Location:** Nottingham, UK
- **Experience:** Expert
- **Salary:** £70,000.0 - £80,000.0
- **Contract:** Permanent contract
- **Skills:** Kubernetes Security, Application Programming Interfaces (APIs), Software System Penetration Testing, Microsoft Azure, Bash Shell, Cloud Computing, Computer Networks, Continuous Delivery, Continuous Integration, Linux, Domain Name System (DNS), Github, Python (Programming Language), Network Architecture, Software Architecture, Role-Based Access Control, Azure DevOps Pipelines, Zero Trust Network Access, Management of Software Versions, Software Modules, Istio, Grafana, Kubernetes Helm Charts, Cobra, Firewalls (Computer Science), CIS Benchmarks, Key Vault
- **Published:** September 29, 2026
- **Apply:** https://www.apply4u.co.uk/jobs/senior-cloud-architect-azure-aks-gitops-hybrid/49122552

## About the Role

will be an exceptional engineer with a proven track record of delivering cloud platforms at scale. They will combine deep technical expertise with the ability to communicate architectural decisions to stakeholders at all levels, from development teams to C-suite.Azure at Scale: Expert in designing Azure landing zones, multi-subscription architectures, hub-spoke networking, and key Azure services (Firewall, Front Door, App Service, Key Vault, Entra ID, PIM).Kubernetes/AKS: Deep production experience managing AKS or similar, including cluster lifecycle, upgrades, RBAC, network policies, and security hardening.Terraform: Expert module development, state management, CI/CD integration, and multi-region/provider codebase management.Service Mesh: Hands-on with Istio (ambient mode preferred) or Cilium for mTLS, traffic management, Gateway API, and zero-trust networking.GitOps & Continuous Delivery: Experience with ArgoCD or equivalent, transitioning teams to GitOps methodologies.CI/CD
Engineering: Strong with GitHub Actions workflows, Azure DevOps Pipelines, and migrating CI platforms.Networking: Expert in Azure networking (VNets, NSGs, DNS, hub-spoke topology, firewall design).Security: Practical shift-left security experience including container scanning, image signing, CIS benchmarks, and pen test readiness.Helm: Skilled in authoring and maintaining Helm charts for standardised multi-language app deployment.Linux & Containers: Strong Linux knowledge, container lifecycle management, Dockerfile optimisation, and registry management.Scripting & Tooling: Proficient in Bash and Python for automation and creating internal CLI tools.Architecture: Experience creating HLDs, LLDs, architectural decisions; leading technical discussions with clear trade-offs.Communication: Effective stakeholder communication from developers to C-suite, translating technical decisions into business context.Mentorship: Proven ability as a technical escalation point and mentor for diverse
engineering teams.Greenfield Delivery: Experience designing and delivering cloud platforms from scratch, ideally with regulatory/compliance considerations.DesirableGo programming for internal tooling and CLI frameworks (Cobra, Kong).Argo Rollouts for blue/green and canary deployments.KEDA, Karpenter, or similar autoscaling and cluster right-sizing tools.BenefitsCompetitive Salary (£70 - 80,000)Company BonusComprehensive healthcare cash planA generous 27 days of annual leave in addition to Bank Holidays2 Wellbeing leave days and 2 days dedicated to giving back to your communityEnjoy your birthday off!Employer pension contribution at 5%Death in service benefit (4 times your salary)Annual award recognitionFun monthly and quarterly social eventsOpportunities for training and professional developmentFlexible hybrid working arrangements #J-18808-Ljbffr

## Description

service mesh, lead CIS security hardening, and create centralised Helm charts for consistency.Design networking architecture including hub VNets, Azure Firewall policies, and DNS configurations with thorough documentation.Implement Identity and Security measures including PIM, RBAC, CI/CD credential management, container security, and compliance preparation.Modernise CI/CD with reusable workflows, template repositories, provider-agnostic tooling, automated versioning, and integrated security scanning.Set up observability with Loki, Grafana Alloy, and tracing; integrate FinOps practices for cost-aware infrastructure and capacity planning.Improve Developer Experience by building automation tools, creating onboarding resources, and providing technical mentorship.Post-production, focus on technical support, roadmap design, and adopting enterprise best practices including ArgoCD, Cilium, Argo Rollouts, KEDA, Falco, Kyverno, DAPR, and multi-tenant AKS designs.The PersonThe successful candidate