Cloud Engineering Lead (Azure) @ TXP

Salary: £? - ? per year

Requirements

• Extensive hands-on Microsoft Azure experience, typically 7+ years in IT and 4+ years on Azure, covering design, architecture, and implementation of enterprise platforms
• Proven delivery of Azure Landing Zones and Cloud Adoption Framework components, including management groups, subscription vending, hub-and-spoke networking, Azure Firewall, private DNS, and Private Endpoints
• Expert Terraform and Bicep skills, including modular design, state management, testing, and versioning; working knowledge of Azure Verified Modules
• Strong Python skills, plus PowerShell and Azure CLI, for automation and API integration
• Proven ability to build and maintain multi-stage, approval-gated provisioning pipelines using Azure DevOps and/or GitHub Actions with Git-based workflows
• Azure security and governance experience with Entra ID, RBAC/PIM, managed identities, Key Vault, Azure Policy, and Defender for Cloud
• Experience with Azure Monitor and Log Analytics, alerting, SLO definition, and service health measures
• Operational readiness experience, including runbooks, incident handling, and handover to run/support teams in an ITIL-aligned environment
• Experience leading and mentoring cloud/DevOps engineers in an agile team, including code review and release practices
• Active SC clearance would be advantageous
• Desirable experience includes platform-as-a-product practices, paved roads or golden paths, service catalogues, developer experience, and consumer feedback loops
• Desirable experience integrating ServiceNow for self-service provisioning and ITSM, including incident, problem, and change processes
• Desirable experience with Microsoft Sentinel and SOC/NOC integrations, SRE practices, brownfield remediation or migration of Azure estates, and Azure Virtual Desktop or Windows 365
• Familiarity with Azure OpenAI or AI Foundry, API Management, Service Bus, Event Grid, policy-as-code testing, pipeline security tools, FinOps, and AKS or container platforms is desirable
• Relevant certifications are desirable, including AZ-305, AZ-400, AZ-104, AZ-700, HashiCorp Terraform Associate, or ITIL 4

Responsibilities

• Lead the design and build of Azure Landing Zones, including management groups, subscription vending, and hub-and-spoke networking
• Own provisioning pipelines and a reusable Terraform/Bicep module library built on Azure Verified Modules
• Enforce governance as code using Azure Policy, RBAC/PIM, and Defender for Cloud, and integrate ServiceNow to automate platform requests
• Set engineering quality standards for code reviews, branching, release strategies, and pipeline quality gates
• Lead brownfield remediation of existing subscriptions and workloads to meet platform standards
• Define platform SLOs and track service health through Azure Monitor and Log Analytics observability integrated with Sentinel and the NOC
• Drive operational readiness and acceptance, ensuring runbooks and documentation are in place before handover to Cloud Run (BAU operations)
• Lead resolution of platform incidents, feed root causes into problem management, and reduce toil through automation and continual service improvement
• Manage the platform front door, including intake, onboarding, and the service catalogue
• Publish paved roads with clear documentation and run onboarding clinics to drive adoption
• Use feedback and friction analysis to improve the consumer experience, including the AVD and engineering workspace experience
• Apply the rule of three: consider patterns requested three or more times for productisation in the catalogue

Technologies

• AI
• API
• Azure
• Cloud
• DevOps
• Firewall
• Git
• GitHub
• Support
• ITIL
• ITSM
• PowerShell
• Python
• RBAC
• Security
• ServiceNow
• Terraform
• Windows
• Office 365

More

We are recruiting a hands-on Cloud Engineering Lead to build, run, and productise an enterprise Azure platform. The role will turn approved architecture into policy-governed infrastructure delivered through code and automated pipelines, with a focus on reliability, operational readiness, and a low-friction experience for product teams. This is a six-month contract with scope to extend, paying £600–£625 per day inside IR35, with hybrid working.

last updated 44 week of 2026