Lead Cloud Engineer

Lead Cloud Engineer / Tech Lead Cloud Engineering, Cloud Security, Azure with Bicep/Iac, CI/CD, Automation, Data Security Best Practice Purview - 80% Remote working...

We are seeking a highly skilled Lead Cloud Engineer with strong DevSecOps expertise to an existing Cloud Platform team. The successful candidate will bring a depth of technical knowledge and be integral to ensuring our Cloud Platform is cutting-edge and highly secure.

As a member of the Cloud Platform team, you will engage in all stages of the product lifecycle, from design and implementation to operational support. You’ll play a key role in ensuring security is embedded in every phase, working across our entire cloud estate to implement best-in-class security practices.

Automation is at the core of what we do, and you will be expected to have a deep understanding of CI/CD tools and Infrastructure as Code (IaC), with a strong focus on integrating security into the product lifecycle. While experience with Azure is preferred, we welcome candidates with cloud expertise in other platforms, as we move toward a multi-cloud strategy.

Key Responsibilities:

• Design, implement, and maintain cloud security on Azure using Bicep and CI/CD pipelines.
• Develop automation scripts for cloud security upkeep and remediation.
• Champion zero-trust security practices and ensure compliance with security standards.
• Troubleshoot and resolve cloud security infrastructure issues.
• Provide guidance to teams on security posture and support less experienced team members.
• Collaborate with IT Risk & Security and Security Operations teams to ensure best practices.

Requirements:

• Proven experience in cloud security engineering and network security.
• Strong knowledge of Azure, CI/CD pipelines, IaC (Bicep), and security tools (Veracode, CodeQL, PrismaCloud).
• Expertise in scripting (PowerShell, Python) and containerization (Docker, Kubernetes).
• Strong understanding of Azure Defender for Cloud and Sentinel.
• Understands Azure Policy and Policy-as-Code.
• Strong knowledge on data security best practices and tools i.e., Purview.
• Microsoft Azure certifications are a plus.

Remote working: 1 day onsite per week in either Bristol, London or Hertfordshire