Azure Cloud Infrastructure Lead — Hybrid, Secure & Scalable

nuffieldhealth; Epsom; Hybrid; GBP 70,000 - 100,000; Full time

Benefits offered by this job

Free gym membership

Health assessments

Retail discounts

Pension options

Job summary

Nuffield Health in the United Kingdom is seeking a Senior Infrastructure Engineer to design, implement and maintain core infrastructure supporting clinical and health services. The role blends hands-on engineering with strategic thinking in a hybrid setup (one office day per week) across Epsom and Barbican, London.

Responsibilities include migrating applications to Azure, implementing Entra ID RBAC and secure baselines, and driving IaC using Terraform and ARM/Bicep.

Qualifications

• Strong hands-on experience with Azure Cloud infrastructure (IaaS, PaaS, serverless).
• Experience with infrastructure-as-code tools to provision and manage cloud infra.
• Proficiency in Windows Server and Linux; scripting in PowerShell and Bash.

Responsibilities

• Design and evolve cloud and on-prem infrastructure for scalability and performance, supporting migration to Azure.
• Implement identity and security best practices (Entra ID, RBAC, Key Vault, patching).
• Use IaC tools (Terraform/ARM/Bicep/CloudFormation) to provision infrastructure and automate delivery processes.
• Collaborate with DevOps, Networking, Security, and Engineering to deliver robust Azure platform solutions and maintain documentation.
• Manage patching, vulnerability remediation, and secure baselines.

Skills

Azure Cloud

Terraform

PowerShell

Entra ID

Tools

Terraform

ARM/Bicep

CloudFormation

Entra ID

Key Vault

Job description

Nuffield Health in the United Kingdom is seeking a Senior Infrastructure Engineer to design, implement and maintain core infrastructure supporting clinical and health services. The role blends hands-on engineering with strategic thinking in a hybrid setup (one office day per week) across Epsom and Barbican, London.

Responsibilities include migrating applications to Azure, implementing Entra ID RBAC and secure baselines, and driving IaC using Terraform and ARM/Bicep.