> Markdown version of [/jobs/ext/3861548-senior-cloud-infrastructure-analyst](https://www.wearedevelopers.com/jobs/ext/3861548-senior-cloud-infrastructure-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Cloud Infrastructure Analyst - **Company:** Simmons & Simmons - **Location:** Bristol, UK - **Experience:** Expert - **Salary:** £56,269.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Application Performance Management, Microsoft Azure, Bash Shell, Cloud Computing, Cloud Engineering, Encodings, Continuous Integration, DevOps, Microsoft Exchange Server, Github, Identity and Access Management, Virtual Private Networks (VPN), Key Management, Log Analysis, SQL Azure, Routing, Windows PowerShell, Role-Based Access Control, Azure Active Directory, Cloud Services, Kusto Query Language, Zero Trust Network Access, Runbook, Datadog, Data Logging, Enterprise Software Applications, Cloud Platform System, Delivery Pipeline, Science Logic, Facebook Flow, Infrastructure Automation Frameworks, Information Technology, Bicep, Elastic Beanstalk, Terraform, Devsecops, Api Management, Serverless Computing, Key Vault, Vulnerability Analysis - **Published:** October 22, 2026 - **Apply:** https://www.adzuna.co.uk/jobs/details/5936497928 ## About the Role * Hands-on experience engineering solutions in Microsoft Azure, including a solid understanding of Azure IaaS and PaaS services (e.g., VMs, Storage, App Services, Front Door, API Management, Azure Functions, Azure SQL, Azure Networking). * Strong knowledge of Identity and Access Management (IAM), with hands-on experience designing, implementing and supporting Microsoft Entra ID, including Conditional Access, RBAC, Privileged Identity Management (PIM), MFA, SSO, enterprise applications. * Strong experience in either administering Microsoft Exchange Online and Mimecast, including mail flow and routing, email security policies, threat protection, message tracing, mail hygiene, continuity, authentication and troubleshooting across enterprise messaging environments. * Strong experience with Infrastructure as Code in either (Bicep and/or Terraform; ARM knowledge acceptable where relevant). * Azure networking knowledge including VNETs, vWAN, ExpressRoute, VPN gateways, hub-and-spoke, and traffic management concepts. * Azure security fundamentals including Strong experience implementing secure key, certificate and secrets management in Microsoft Azure, including Azure Key Vault, SSH keys, encryption keys, managed identities and automated secret/key rotation, aligned with Zero Trust and least-privilege principles. * Strong scripting capability in PowerShell (and/or Bash), and the ability to automate operational tasks and deployments. * Strong troubleshooting mindset: diagnosing complex issues and driving them to resolution with appropriate escalation and RCA. * Clear communication skills, including the ability to explain technical topics in plain English in a professional services environment. * Degree in Computer Science or similar engineering related field. * Azure certifications (e.g., Azure Administrator / DevOps / Cloud Engineering), but equivalent experience is acceptable. * Excellent Knowledge of the Azure and Windows Stack. ## Description We are looking for a Senior Cloud Infrastructure Analyst to join our IT department in Bristol., We are seeking a highly experienced Senior Azure Cloud Engineer to lead the design, implementation and continuous improvement of our Microsoft Azure platform. The role is responsible for delivering secure, resilient and scalable cloud infrastructure, driving Infrastructure as Code adoption, embedding DevOps practices, and acting as a technical authority for cloud platform engineering across the firm. This is a hands-on engineering role focused on designing and delivering secure, scalable and resilient cloud solutions in Microsoft Azure, using Infrastructure as Code and CI/CD automation as the default approach. You will work closely with architects, security and application teams to implement cloud platform patterns and enable delivery teams to deploy safely and consistently. The successful candidate will combine deep Azure technical expertise with strong solution design, automation and operational leadership capabilities, helping the organisation modernise infrastructure and adopt cloud-native patterns. What will you do: * Build and maintain self-service cloud platform capabilities that enable delivery teams to consume Azure services consistently, securely and at scale. A strong familiarity working in IaC and pipelines to ensure quality, security and adherence to baseline standards. * Develop reusable Infrastructure as Code modules using Bicep and Terraform. * Consume and maintain standardised deployment pipelines. * Create self-service patterns for application and infrastructure teams. * Improve developer experience through platform automation and standardisation. * Monitor and improve platform health using Azure observability tooling (e.g., Azure Monitor, Log Analytics/KQL, Application Insights, Science Logic), and improve alerting and diagnostics. * Drive cloud financial governance through FinOps practices including rightsizing, reserved instances, savings plans, storage lifecycle management and cost optimisation initiatives. * A senior analyst is expected to be a point of contact and escalation at all times, taking ownership of incident management, while providing 3rd & 4th level and technical support. * Embed security controls and compliance checks into delivery pipelines (DevSecOps approach), ensuring cloud systems are configured securely and remain compliant. * Contribute to platform governance initiatives such as naming/tagging conventions, logging standards, Key Vault/secret patterns, and controlled change via Github Push/Pull requests. * Work closely with Security and CISO stakeholders and the wider networks team to maintain a strong and compliant security posture across our Azure public cloud subscription to deliver: * Implement Zero Trust security principles across Azure environments. * Design and deploy privileged access controls using PIM and Just-in-Time access. * Implement identity security through Entra ID, Conditional Access and Managed Identities. * Support compliance initiatives and security audits. * Partner with security teams to remediate risks identified through vulnerability assessments and threat modelling. * Act as the senior Azure technical authority for cloud platform engineering. * Lead technical decision making and provide governance for major cloud initiatives. * Influence technical direction through evidence-based decision making. * Identify opportunities to reduce risk, improve automation and increase operational efficiency. * Build trusted relationships with architects, security teams, suppliers and business stakeholders. * Operate with a high degree of autonomy and accountability. * Review designs produced by internal teams and suppliers. * Coach engineers in Azure engineering, Infrastructure as Code and DevOps practices. * Contribute to cloud strategy and roadmap development. * Collaborate with stakeholders, architects and engineers to translate requirements into Azure designs and deliver working solutions. * Contribute to planning and execution of cloud-focused initiatives, identifying risks and dependencies early and supporting smooth transition into support. * Maintain clear technical documentation (design notes, runbooks, standard operating procedures) in the team's knowledge base., Working arrangements * Hybrid working with regular office attendance and occasional on-site meetings. * Participation in an out-of-hours on-call rota. * Flexibility to work overtime when required for projects or maintenance activities. * Willingness to travel occasionally within the UK and internationally to support business needs. * Willingness to travel on occasion to other offices within the UK, EMEA and APAC territories., We are committed to fostering equality, diversity and inclusion within our firm and to ensuring equal employment opportunities. We believe that this commitment creates a vibrant and rewarding work environment. We are therefore committed to: * Upholding equal opportunities, regardless of race, ethnicity, religion, belief, age, disability, sexual orientation, sex, gender reassignment, gender identity, marital status, or pregnancy, including maternity and paternity. This commitment extends to addressing any instances of perceived or associative discrimination and harassment. We also ensure fair treatment during recruitment and selection processes for those who are serving or have served in the armed forces, along with their families. * Accommodating requests for flexible working arrangements whenever possible. We encourage you to discuss your needs with us if this is something you require. * Making our roles accessible to individuals with diverse abilities. If you need any reasonable adjustments during the recruitment process, please let us know so we can meet your needs. * We offer a range of employee networks to support our colleagues. More information about these networks can be found in the D&I Information booklet that candidates are sent when invited to interview. We encourage you to apply even if you don't meet every single requirement. We are looking for individuals who are passionate and eager to learn and grow with us. Your unique experiences and perspectives could be a great addition to our team.