Azure Cloud Engineer

As an Azure Cloud Engineer within the Cloud Platform and Security Team, you will lead the design, implementation, and ongoing management of Azure platform solutions for our clients. You will take a senior technical lead on engagements, covering the full breadth of the Azure platform – from landing zones, networking, and identity through to security, governance, cost optimisation, and operations – ensuring that client environments are well-architected, secure, and operationally resilient. You will guide clients on platform design decisions, lead discovery and implementation engagements, and work closely with internal data platform and security colleagues to deliver end-to-end solutions. As part of a data-focused consultancy, you will often design and manage the Azure infrastructure that underpins clients’ data and AI workloads, but your expertise and remit will span the Azure platform as a whole. You will bring a strong mix of technical depth and consultancy skills, with the ability to engage senior client stakeholders, translate complex platform concepts into practical recommendations, and take ownership of delivery quality. You will contribute to the growth of the Cloud Platform and Security Team, mentor and support colleagues, and help develop reusable accelerators, patterns, and internal guidance. Cloud Platform and Infrastructure Lead the design and implementation of Azure infrastructure solutions, ensuring scalability, reliability, and security across a range of client environments. Design and implement Azure landing zones aligned to the Cloud Adoption Framework, including management group hierarchy, subscription design, and policy-driven governance. Implement and manage infrastructure as code using Azure Bicep and/or Terraform, with deployments automated through Azure DevOps or GitHub Actions pipelines. Design and implement Azure networking solutions including hub-and-spoke topologies, private endpoints, private DNS zones, and hybrid connectivity via VPN and ExpressRoute. Implement and maintain cloud security controls including RBAC, Azure Policy, Key Vault, Defender for Cloud, and Microsoft Entra ID configurations. Manage and optimise Azure resources for performance and cost efficiency, applying FinOps principles and Azure Well-Architected Framework guidance. Lead Azure migration and modernisation engagements, including assessment, planning, and execution. Design and manage the Azure infrastructure that underpins the data and AI solutions delivered by the wider Simpson Associates team. Monitor and troubleshoot cloud infrastructure to ensure high availability and performance, contributing to managed service operations where required. Participate in the on-call rota, supporting managed service customers. Client Delivery and Stakeholder Management Lead client engagements with confidence, taking ownership of delivery quality and managing client relationships throughout the engagement lifecycle. Plan and facilitate discovery workshops, technical design sessions, and stakeholder reviews, adapting communication style to both technical and non-technical audiences. Produce high-quality client-facing deliverables including architecture documentation, implementation plans, and technical guidance. Contribute to the development of reusable accelerators, delivery frameworks, and internal knowledge across the Cloud Platform and Security Team. Mentor and support the development of other consultants within the team, providing technical guidance and reviewing delivery quality. Technical Requirements Strong hands-on experience designing and implementing Azure infrastructure solutions in client-facing or complex enterprise environments. Experience designing and deploying Azure landing zones, with working knowledge of the Cloud Adoption Framework and Azure Well-Architected Framework. Proficiency with infrastructure as code using Azure Bicep and/or Terraform, and CI/CD pipelines in Azure DevOps or GitHub Actions. Strong knowledge of Azure networking including hub-and-spoke architectures, private endpoints, private DNS zones, VNet peering, VPN, and ExpressRoute. Experience with Microsoft Entra ID including managed identities, service principals, Entra groups, and RBAC for Azure and Microsoft 365 workloads. Experience implementing Azure security controls including Azure Policy, Key Vault, and Microsoft Defender for Cloud. Understanding of Azure storage architecture (Azure Blob Storage, ADLS Gen2, Azure Files) including resilience, backup, and recovery options. Familiarity with Azure Monitor and Log Analytics for operational monitoring, alerting, and troubleshooting. Scripting and automation skills using PowerShell and/or the Azure CLI. A confident senior technical consultant able to lead client engagements and take ownership of delivery quality. Strong stakeholder management skills, with the ability to engage and influence at both technical and senior business levels. Excellent written and verbal communication skills, with the ability to translate complex platform concepts into clear guidance for clients. A natural problem solver with excellent analytical and troubleshooting skills. The ability to prioritise workload under pressure and deliver to tight deadlines. A collaborative team player who contributes to a culture of knowledge sharing and continuous improvement. Enthusiastic, proactive, and confident in driving engagement progress without close day-to-day oversight. Advantageous Qualifications and Skills Microsoft Certified: Azure Solutions Architect Expert (AZ-305). Microsoft Certified: Azure Administrator Associate (AZ-104). Microsoft Certified: Azure Security Engineer Associate (AZ-500). Experience with Microsoft Fabric, Microsoft Purview, or other Microsoft data platform and governance technologies. Experience with Microsoft Sentinel and the wider Microsoft Defender suite. Atlassian Jira and project delivery tooling. Presenting skills and confidence speaking in front of an audience. Experience working with NHS, police, local government, or regulated private sector clients. Annual leave, starting at 25 days, increasing to 28 at 3 years and 30 at 5 years Matched 4% salary pension contribution Healthcare cashplan Private medical cover (following successful completion of probation) Wellbeing platform Life assurance, paying 4x basic salary Income protection insurance (after your first year) Car salary sacrifice purchase scheme Personal development through a structured and empowering approach Flexible working schedules Gifts on your birthday and Christmas Cycle to Work salary sacrifice scheme Tech salary sacrifice scheme