Azure Cloud & Security Engineer

Bright Purple Resourcing Ltd; Glasgow; Hybrid; GBP 43,000 - 53,000; Full time

Job summary

Bright Purple is recruiting an Azure Cloud & Security Engineer in Glasgow for a hybrid role (2 days per week in the office). You will own security, networking and identity across the Azure environment, shaping how the platform is run and secured.

This hands-on position involves working with IT, developers and external partners to ensure compliance, resilience and performance. The role requires strong Azure skills and a practical approach to governance.

Qualifications

• 5+ years' hands-on experience with Azure in production.
• Strong Azure networking and Entra ID skills.
• Experience working to PCI DSS, NIST, ISO 27001 or Cyber Essentials Plus.
• Confident PowerShell scripting.
• Ability to explain technical risk in plain English.
• Bonus: Intune, M365, IaC (Bicep/Terraform), Defender for Cloud and Sentinel; relevant certifications.

Responsibilities

• Designing and running Azure networking: VNets, NSGs, DNS, private endpoints, Azure Front Door and WAF
• Owning Entra ID, Conditional Access, PIM and RBAC, including joiner, mover and leaver automation with HR
• Leading the technical side of PCI DSS v4.0 compliance and NIST alignment, from controls and evidence through to audits
• Building automation with Logic Apps, Function Apps and PowerShell
• Securing the MySQL and SQL Managed Instance estate alongside a specialist database partner
• Managing MSP and consultant relationships, and coaching colleagues

Skills

Azure in production

Azure networking

Entra ID / Azure AD

PowerShell scripting

PCI DSS / NIST / ISO 27001

Communication of risk

Tools

Logic Apps

Function Apps

Azure Defender / Cloud tools

Job description

Azure Cloud & Security Engineer

Glasgow/Hybrid (2 days a week in the office)

Salary up to £48,000

Our client, an established online education provider based in Glasgow, runs its learning platform and business systems on Microsoft Azure and Microsoft 365. They're looking for a mid/senior engineer to take ownership of the security, networking and identity of that environment and set the standard for how it's run.

This is a hands‑on role with real influence. You'll be the go‑to person for Azure security, working with the IT team, developers and external partners to keep the platform secure, compliant and well run.

What you'll be doing

• Designing and running Azure networking: VNets, NSGs, DNS, private endpoints, Azure Front Door and WAF
• Owning Entra ID, Conditional Access, PIM and RBAC, including joiner, mover and leaver automation with HR
• Leading the technical side of PCI DSS v4.0 compliance and NIST alignment, from controls and evidence through to audits
• Building automation with Logic Apps, Function Apps and PowerShell
• Securing the MySQL and SQL Managed Instance estate alongside a specialist database partner
• Managing MSP and consultant relationships, and coaching colleagues

What you'll bring

• 5+ years' hands‑on experience with Azure in production
• Strong Azure networking and Entra ID skills
• Experience working to PCI DSS, NIST, ISO 27001 or Cyber Essentials Plus
• Confident PowerShell scripting
• The ability to explain technical risk in plain English

It would be a bonus if you know Intune and M365, infrastructure as code (Bicep or Terraform), or Defender for Cloud and Sentinel, or if you hold certifications such as AZ-500, SC-300 or AZ-700.

Bright Purple is proud to be an equal opportunities employer. We partner with clients who share our commitment to diversity and inclusion across the industry.