<strong>Senior Cloud Engineer – Azure</strong> <br>We’re looking for a Senior Cloud Engineer who really knows their way around Azure - someone who’s comfortable designing solid cloud architecture, putting the right governance in place, keeping things secure, and making sure the environment runs efficiently and cost-effectively. If you enjoy building scalable cloud setups and tightening up security and compliance without overcomplicating things, you’ll be a great fit here.<br><br> <strong>About the Role</strong> You’ll be the go-to person for our Azure platform. That means designing and implementing the core infrastructure, putting guardrails around how resources are used, and making sure everything stays secure, compliant, and optimised. It’s a hands-on role with plenty of ownership, especially around architecture, policy, automation, and cost management.<br><br> <strong>What You’ll Be Doing</strong> <br><br><strong>Azure Architecture & Infrastructure</strong><br> <ul> <li>Designing and building Azure environments using VMs, VNets, custom routing, NSGs, Azure Firewall, Application Gateway, Private Link, and ExpressRoute.</li> <li>Managing Azure Storage (Blob, Files, lifecycle policies), Azure SQL, Cosmos DB, and DR tooling.</li> <li>Supporting modern workloads like AKS and serverless (Functions, Logic Apps).</li> </ul> <strong>Security, Compliance & Governance</strong><br> <ul> <li>Making sure we meet ISO 27001, PCI DSS, and other compliance needs through Azure Policy and Defender for Cloud.</li> <li>Strengthening identity security in Entra ID – Conditional Access, PIM, MFA, RBAC, Identity Protection.</li> <li>Managing hybrid identity setups with AAD Connect.</li> </ul> <strong>Monitoring & Day-to-Day Operations</strong><br> <ul> <li>Building out monitoring and analytics with Azure Monitor, Log Analytics, Application Insights, and Sentinel.</li> <li>Keeping the environment reliable, scalable, and well-structured.</li> <li>Using Bicep/ARM and automation tools (PowerShell, Azure Automation, Logic Apps) to simplify and standardise processes.</li> </ul> <strong>Cost Optimisation</strong><br> <ul> <li>Helping reduce and control spend with Azure Cost Management, Advisor, rightsizing, automation, and tagging strategies.</li> <li>Setting up reporting and guardrails so costs stay predictable and responsible.</li> </ul> <strong>Microsoft 365 (Secondary Area)</strong><br> <ul> <li>Supporting Teams, Exchange Online, SharePoint, Intune, Defender for Endpoint, and compliance tooling where needed.</li> </ul> <strong>Skills & Experience We’re Looking For</strong> <ul> <li>Strong background in Azure architecture, governance, and operations.</li> <li>Solid understanding of Azure networking, storage, security, and landing zones.</li> <li>Experience with AKS, serverless workloads, and hybrid connectivity.</li> <li>Hands-on knowledge of compliance frameworks like ISO 27001 and PCI DSS.</li> <li>Deep experience with Microsoft Entra ID and identity governance.</li> <li>Confident with IaC (Bicep/ARM) and automation.</li> <li>Familiar with Azure Policy, Defender for Cloud, and Sentinel.</li> <li>Comfortable working across Microsoft 365 services.</li> <li>Bonus points for experience with DNS, Azure Functions, ADF, Virtual Desktop, or GCP</li> </ul> <br>At BLACKROC Recruitment, we are committed to fostering diversity, equity, and inclusion. We welcome applications from individuals of diverse backgrounds, including those with lived experiences. If you require any adjustments during the recruitment process, please don’t hesitate to reach out to the above-mentioned BLACKROC Consultant.
