Azure Cloud Engineer

Job requirements

• Lead the design and implementation of Azure infrastructure solutions, ensuring scalability, reliability, and security across a range of client environments.

• Design and implement Azure landing zones aligned to the Cloud Adoption Framework, including management group hierarchy, subscription design, and policy-driven governance.

• Implement and manage infrastructure as code using Azure Bicep and/or Terraform, with deployments automated through Azure DevOps or GitHub Actions pipelines.

• Design and implement Azure networking solutions including hub-and-spoke topologies, private endpoints, private DNS zones, and hybrid connectivity via VPN and ExpressRoute.

• Implement and maintain cloud security controls including RBAC, Azure Policy, Key Vault, Defender for Cloud, and Microsoft Entra ID configurations.

• Manage and optimise Azure resources for performance and cost efficiency, applying FinOps principles and Azure Well-Architected Framework guidance.

• Lead Azure migration and modernisation engagements, including assessment, planning, and execution.

• Design and manage the Azure infrastructure that underpins the data and AI solutions delivered by the wider Simpson Associates team.

• Monitor and troubleshoot cloud infrastructure to ensure high availability and performance, contributing to managed service operations where required.

• Participate in the on-call rota, supporting managed service customers.

• Lead client engagements with confidence, taking ownership of delivery quality and managing client relationships throughout the engagement lifecycle.

• Plan and facilitate discovery workshops, technical design sessions, and stakeholder reviews, adapting communication style to both technical and non-technical audiences.

• Produce high-quality client-facing deliverables including architecture documentation, implementation plans, and technical guidance.

• Contribute to the development of reusable accelerators, delivery frameworks, and internal knowledge across the Cloud Platform and Security Team.

• Mentor and support the development of other consultants within the team, providing technical guidance and reviewing delivery quality.

• Strong hands-on experience designing and implementing Azure infrastructure solutions in client-facing or complex enterprise environments.

• Experience designing and deploying Azure landing zones, with working knowledge of the Cloud Adoption Framework and Azure Well-Architected Framework.

• Proficiency with infrastructure as code using Azure Bicep and/or Terraform, and CI/CD pipelines in Azure DevOps or GitHub Actions.

• Strong knowledge of Azure networking including hub-and-spoke architectures, private endpoints, private DNS zones, VNet peering, VPN, and ExpressRoute.

• Experience with Microsoft Entra ID including managed identities, service principals, Entra groups, and RBAC for Azure and Microsoft 365 workloads.

• Experience implementing Azure security controls including Azure Policy, Key Vault, and Microsoft Defender for Cloud.

• Understanding of Azure storage architecture (Azure Blob Storage, ADLS Gen2, Azure Files) including resilience, backup, and recovery options.

• Familiarity with Azure Monitor and Log Analytics for operational monitoring, alerting, and troubleshooting.

• Scripting and automation skills using PowerShell and/or the Azure CLI.

Job responsibilities

• A confident senior technical consultant able to lead client engagements and take ownership of delivery quality.

• Strong stakeholder management skills, with the ability to engage and influence at both technical and senior business levels.

• Excellent written and verbal communication skills, with the ability to translate complex platform concepts into clear guidance for clients.

• A natural problem solver with excellent analytical and troubleshooting skills.

• The ability to prioritise workload under pressure and deliver to tight deadlines.

• A collaborative team player who contributes to a culture of knowledge sharing and continuous improvement.

• Enthusiastic, proactive, and confident in driving engagement progress without close day-to-day oversight.

• Microsoft Certified: Azure Solutions Architect Expert (AZ-305).

• Microsoft Certified: Azure Administrator Associate (AZ-104).

• Microsoft Certified: Azure Security Engineer Associate (AZ-500).

• Experience with Microsoft Fabric, Microsoft Purview, or other Microsoft data platform and governance technologies.

• Experience with Microsoft Sentinel and the wider Microsoft Defender suite.

• Atlassian Jira and project delivery tooling.

• Presenting skills and confidence speaking in front of an audience.

• Experience working with NHS, police, local government, or regulated private sector clients.

Job benefits