Full Job Description Job Title: Cloud Engineer (Azure, Security & Infrastructure) Department: Managed Services / Engineering Reports To: Director of Operations Location: Hybrid (UK) Job Purpose The Cloud Engineer role operates within Infrashift Solutions engineering and managed services function, supporting a portfolio of customer environments with a strong focus on Microsoft Azure, Microsoft Defender, and secure cloud infrastructure operations. This is a hands-on, technical role suited to a capable all-rounder with strong infrastructure foundations and the ability to support both project delivery and operational support. The role includes cloud engineering, security implementation, monitoring, incident response support, and continual service improvement across multiple customer tenants. The successful candidate will contribute to delivering secure, scalable and supportable solutions, ensuring that environments meet best practice standards, are documented appropriately, and can be supported effectively within a managed services model. Infrashift will support the candidate in working towards relevant Microsoft certifications (e.g., AZ-104, AZ-500, SC-200), with a focus on continual technical development. NO SPONSORSHIP can be offered for this role. Key Responsibilities: Azure Cloud Engineering Support the design, implementation, and ongoing management of Microsoft Azure infrastructure across multiple customer environments Deploy and maintain Azure resources including virtual machines, storage, networking, backup and recovery services Implement and maintain Azure governance controls including tagging standards, role-based access control (RBAC), and policy enforcement Assist in the delivery of Azure migrations, upgrades, and modernisation projects Ensure cloud environments are built in a secure, consistent, and repeatable manner aligned to best practice M icrosoft Security (Defender / SOC) Implement, manage and support Microsoft security technologies, including: Microsoft Defender for Cloud Microsoft Defender for Endpoint Microsoft Sentinel (SIEM) Support security monitoring and incident response activities, including triage, investigation, and escalation where required Assist with onboarding and tuning security alerts, rules, and security policies Work with internal and customer stakeholders to improve security posture and reduce risk Contribute to vulnerability management, secure configuration, and continuous compliance improvements Infrastructure & Operations Provide 2nd and 3rd line support across cloud and infrastructure platforms Troubleshoot complex technical issues across systems, networks, identity, and security tooling Support the management of hybrid environments including on-premises connectivity, VPNs, DNS, and firewalls Ensure patching, backup, and disaster recovery processes are implemented and maintained Work within service management processes aligned to SLAs and customer expectations Automation & Infrastructure as Code Support the implementation and maintenance of Infrastructure as Code ( IaC ) approaches using tools such as: Terraform and/or Bicep PowerShell and Azure CLI Assist with automation of repeatable operational tasks to improve efficiency and reduce manual overhead Contribute to standardisation and the creation of reusable deployment templates Support CI/CD processes where required, particularly relating to infrastructure deployments Documentation & Customer Engagement Produce and maintain clear technical documentation including build guides, runbooks, and support documentation Participate in customer meetings as required, providing technical input and updates Communicate effectively with both technical and non-technical stakeholders Contribute to continual improvement initiatives across Infrashifts managed services and customer delivery processes Essential Criteria Proven experience working in a Cloud Engineer, Infrastructure Engineer, or similar technical role Strong hands-on experience with Microsoft Azure in production environments Practical experience with Microsoft security tooling, including at least one of: Defender for Cloud Defender for Endpoint Microsoft Sentinel Strong infrastructure knowledge including Windows Server and/or Linux Understanding of identity and access management concepts, ideally within Microsoft Entra ID (Azure AD) Solid understanding of networking fundamentals (TCP/IP, DNS, routing, firewalls, VPNs) Experience working in an MSP, consultancy, or multi-customer environment Strong troubleshooting and problem-solving skills Scripting and automation capability (PowerShell essential; Azure CLI desirable) Ability to work effectively within operational processes, including ticket handling and SLA-driven delivery Strong communication and documentation skills A proactive, can-do approach and willingness to learn Desirable Criteria Microsoft certifications (or actively working towards), such as: AZ-104 (Azure Administrator) AZ-500 (Azure Security Engineer) Experience with Azure Policy, Azure Landing Zones, and governance frameworks Experience with Infrastructure as Code tooling such as Terraform or Bicep Experience supporting security operations processes (SOC) including alert triage and investigation Experience with cost optimisation and cloud right-sizing across Azure subscriptions Exposure to compliance frameworks such as ISO27001, NIST, Cyber Essentials, or similar Working Pattern 37.5 hours per week. Standard hours are Monday to Friday with flexible working options available. Some out-of-hours work may be required on an on-call rota basis, depending on customer requirements. What Youll Get in Return: Competitive salary package 26 days holiday (including public holidays) Company pension scheme Investment in your development through a paid certification programme Clear progression and growth opportunities Hybrid working for better worklife balance