Azure Cloud Engineer at Quantico Solutions in United Kingdom

Job Overview
We are hiring an Azure Cloud Engineer to work on secure Microsoft Azure platforms for UK public sector and defence clients.

Most of your time will be spent building and supporting Azure environments. That includes setting up new landing zones, configuring networking and identity, automating deployments and looking after the platform once it's in use. You'll also help move existing systems into Azure, so experience with migrations is useful.

You'll be part of a small team of engineers, architects and security specialists. The architects set the overall design, but you'll be expected to give your input on how things should be built and to raise problems when you spot them. The work is in secure environments, so you'll need to be careful, thorough and used to working within strict security rules.

Duties

• Build and configure Azure environments, including landing zones, management groups, subscriptions, virtual networks, storage and compute
• Set up secure network connectivity, including hub-and-spoke designs, firewalls, private endpoints and VPN or ExpressRoute links
• Manage identity and access in Microsoft Entra ID, covering role-based access, conditional access policies and Privileged Identity Management
• Write and maintain infrastructure as code in Terraform or Bicep, so every environment can be rebuilt the same way
• Build and maintain CI/CD pipelines in Azure DevOps or GitHub Actions for both infrastructure and application deployments
• Deploy and support containerised workloads on Azure Kubernetes Service (AKS)
• Apply and enforce security settings using Azure Policy, Defender for Cloud and Key Vault
• Set up monitoring, logging and alerting through Azure Monitor and Log Analytics, and make sure the right logs reach Microsoft Sentinel
• Plan and carry out migrations of applications and servers from on-premise or legacy hosting into Azure
• Look after backups, patching and disaster recovery so the platform stays reliable
• Investigate and fix issues across the platform, and help out during incidents
• Keep documentation up to date, including build notes, configuration records and support guides
• Support security accreditation by providing evidence of how the platform is built and secured

Requirements

• Active SC or DV security clearance
• Sole UK national, because of the security level of the work
• At least 2 years of hands-on Azure engineering experience in a commercial role
• Strong knowledge of Azure networking, including virtual networks, firewalls and private connectivity
• Solid experience with Entra ID, role-based access and conditional access
• Experience writing infrastructure as code in Terraform or Bicep
• Experience building and maintaining CI/CD pipelines
• A good understanding of cloud security and how to apply it in practice
• Able to work independently, while keeping the wider team informed

It would also help if you have:

• An Azure certification, such as AZ-104 (Azure Administrator), AZ-500 (Azure Security Engineer) or AZ-305 (Azure Solutions Architect)
• Experience running workloads on AKS
• Experience feeding logs into Microsoft Sentinel or working alongside a SOC
• Scripting experience in PowerShell or Python
• Previous work on UK government or defence projects

Pay: £500.00-£700.00 per day

Work Location: Remote