What You'll Do

• Build, automate and operate Azure landing zones, virtual networks, AVD/VDI session hosts and platform services using Infrastructure-as-Code, ensuring secure-by-default, supportable and scalable outcomes.
• Administer Entra ID, Microsoft 365 and hybrid identity, including RBAC, PIM, Conditional Access, group management and privileged account governance to reduce attack surface and enforce least privilege.
• Own Azure DevOps and GitHub pipelines, repositories, automation and certificate provisioning to deliver repeatable, auditable change and eliminate manual toil.
• Deliver and govern platform changes through the Technical CAB, producing designs, risk assessments and operational documentation for safe implementation.
• Integrate and operate cloud security tooling and act on posture, vulnerability and guardrail findings to maintain a strong security baseline.
• Drive FinOps and cost discipline across the cloud estate, identifying waste, right-sizing workloads and improving spend visibility.
• Provide third-line troubleshooting, transition BAU tasks to NTT, and author SOPs, knowledge articles and run-books to reduce key-person dependency.
• 
  

What You'll Bring

• Understanding of how secure, resilient cloud platforms enable engineering, manufacturing and commercial in a high-performance environment.
• Awareness of cloud governance, FinOps, ITIL change/incident/problem management and data classification.
• Strong hands-on Azure engineering across compute, networking (vNET/gateways), storage, AVD and platform services.
• Entra ID / Microsoft 365 administration, hybrid identity, RBAC, PIM and Conditional Access.
• Infrastructure-as-Code and automation (Azure DevOps, PowerShell, Bicep/Terraform, CI/CD pipelines).
• Cloud security tooling, vulnerability remediation and secure configuration; exposure to containers/Kubernetes and multi-cloud (AWS/GCP) an advantage.
• Automation-first engineer who protects production and challenges the status quo with forward-thinking solutions.
• Collaborative, clear communicator able to explain cloud risk and options to technical and non-technical stakeholders.
• Curious, delivery-focused and comfortable operating in a fast-changing, integrating organisation.

What You'll Do

• Build, automate and operate Azure landing zones, virtual networks, AVD/VDI session hosts and platform services using Infrastructure-as-Code, ensuring secure-by-default, supportable and scalable outcomes.
• Administer Entra ID, Microsoft 365 and hybrid identity, including RBAC, PIM, Conditional Access, group management and privileged account governance to reduce attack surface and enforce least privilege.
• Own Azure DevOps and GitHub pipelines, repositories, automation and certificate provisioning to deliver repeatable, auditable change and eliminate manual toil.
• Deliver and govern platform changes through the Technical CAB, producing designs, risk assessments and operational documentation for safe implementation.
• Integrate and operate cloud security tooling and act on posture, vulnerability and guardrail findings to maintain a strong security baseline.
• Drive FinOps and cost discipline across the cloud estate, identifying waste, right-sizing workloads and improving spend visibility.
• Provide third-line troubleshooting, transition BAU tasks to NTT, and author SOPs, knowledge articles and run-books to reduce key-person dependency.
• 
  

What You'll Bring

• Understanding of how secure, resilient cloud platforms enable engineering, manufacturing and commercial in a high-performance environment.
• Awareness of cloud governance, FinOps, ITIL change/incident/problem management and data classification.
• Strong hands-on Azure engineering across compute, networking (vNET/gateways), storage, AVD and platform services.
• Entra ID / Microsoft 365 administration, hybrid identity, RBAC, PIM and Conditional Access.
• Infrastructure-as-Code and automation (Azure DevOps, PowerShell, Bicep/Terraform, CI/CD pipelines).
• Cloud security tooling, vulnerability remediation and secure configuration; exposure to containers/Kubernetes and multi-cloud (AWS/GCP) an advantage.
• Automation-first engineer who protects production and challenges the status quo with forward-thinking solutions.
• Collaborative, clear communicator able to explain cloud risk and options to technical and non-technical stakeholders.
• Curious, delivery-focused and comfortable operating in a fast-changing, integrating organisation.