Cloud Engineer - Secure - On-site Hampshire

DXC Technology Company; Farnborough; On-site; GBP 65,000 - 90,000; Full time

Job summary

DXC Technology is seeking a Cloud Engineer to operate and optimize enterprise Azure and hybrid infrastructure. You will implement IaC, CI/CD, and automation while aligning with ITIL processes.

A DV clearance is required, and on-site attendance is five days a week in the United Kingdom. Responsibilities include configuring Azure networking, managing identities, and overseeing security governance with Entra ID, RBAC, PIM, and Key Vault.

Qualifications

• Hands-on enterprise Microsoft Azure operations (AZ-104 level) including Entra ID, RBAC, and access management.
• Azure networking and application delivery using VNets, NSGs, Private Endpoints/DNS, Front Door/APIM.
• Scripting and automation with PowerShell and Azure CLI; Python or Bash.
• Infrastructure as Code and DevOps with Terraform or Bicep/ARM, Azure DevOps pipelines, and Git.
• Monitoring with Azure Monitor, Log Analytics, Application Insights, and KQL.
• Windows Server and VMware vSphere/ESXi/vCenter administration in ITIL-driven environments.
• Must have DV clearance.

Responsibilities

• Operate, support, and troubleshoot Azure/on-premise environments to meet SLAs.
• Manage certificates, domains, and secret expiry; automate lifecycle with Key Vault.
• Maintain security controls (Entra ID, RBAC, PIM) and remediate Defender recommendations.
• Implement CI/CD pipelines and IaC deployments; automate operational tasks.
• Support backup, DR testing, patching, and governance; ensure cost hygiene.

Skills

Azure operations

RBAC/PIM

Entra ID

ITIL processes

DV clearance

Networking

Scripting

Monitoring & alerting

DevOps mindset

Mentoring

Education

Bachelor’s degree in Information Technology, Computer Science, or Engineering

AZ-104 Azure Administrator Associate

AZ-500 / AZ-700 / AZ-400 or ITIL 4 Foundation

Tools

Azure DevOps

Terraform

Bicep/ARM

PowerShell

Azure CLI

Python

Git

Azure Monitor

Job description

Role Overview

The Cloud Engineer operates, supports, and troubleshoots enterprise Microsoft Azure and hybrid infrastructure environments or premise cloud infrastructures, delivering secure, scalable, and reliable cloud operations for DXC clients. The role spans Azure cloud operations, Infrastructure as Code and CI/CD automation, networking and security governance, monitoring and resilience, and supporting Linux/Windows Server / VMware hybrid estates — all within ITIL-aligned service delivery. Senior-level engineers additionally act as the escalation point for complex incidents, drive continuous improvement, and mentor other engineers. Due to the nature of the work and the customers we support, the successful candidate must be eligible to meet UK Government and contractual personnel security requirements, including the applicable residency requirements for the role, and have the right to work in the United Kingdom. Some roles may also be subject to nationality requirements where these are necessary to meet UK Government or contractual security obligations. Please note this role will require attendance on-site 5 days a week.

Key Responsibilities

Azure Cloud Operations

• Operate, support, and troubleshoot production on-premise\Azure environments across compute, storage, networking, identity (Entra ID), and PaaS services — including VM/VMSS, App Service, Azure Functions, API Management, Azure SQL, Storage, and Key Vault.
• Execute service requests and changes within defined scope and SLAs (e.g. Front Door / Application Gateway WAF rules, IP allow-lists, RBAC/PIM access and configuration updates).
• Manage SSL/TLS certificates, custom domains, and certificate renewals/rotations; automate the certificate lifecycle using Key Vault.
• Manage app registrations, service principals, and secret/certificate expiry — reducing manual rotation through managed identities and automation.

Networking, Security & Governance

• Troubleshoot connectivity across VNets, peering, NSGs, UDRs, Azure Firewall, Private Endpoints, Private DNS zones, and VPN/ExpressRoute.
• Maintain security and governance controls — Entra ID, RBAC, PIM, managed identities, Key Vault, and Azure Policy — and remediate Microsoft Defender for Cloud recommendations.
• Support customer, government, compliance, and audit requirements (e.g. NZISM or similar frameworks).

Automation, IaC & DevOps

• Implement and maintain Infrastructure as Code and CI/CD deployments using Azure DevOps and Terraform/Bicep/ARM; remediate configuration drift.
• Automate operational tasks using PowerShell, Azure CLI, Python, or Bash, together with Azure Automation, Logic Apps, and Azure Functions.
• Follow good Git practice — branching, pull requests, and code reviews; use AI-assisted tools (e.g. GitHub Copilot) responsibly.

Monitoring, Reliability & Resilience

• Enhance and tune monitoring/alerting with Azure Monitor, Log Analytics, Application Insights, alert rules, and action groups; write KQL for investigation and reporting.
• Perform root-cause analysis and problem management, addressing root causes through code and configuration improvements.
• Support backup, restore, and disaster-recovery testing (Azure Backup, Azure Site Recovery); manage patching/compliance via Azure Update Manager and Azure Arc.
• Maintain cost hygiene — act on Azure Advisor recommendations and cost anomalies, clean up orphaned resources, and enforce tagging standards.

Service Delivery & Hybrid Infrastructure

• Work within ITIL-aligned incident, problem, and change management processes, meeting service levels; participate in the on-call roster and after-hours work where required.
• Maintain accurate technical documentation, runbooks, operational procedures, and knowledge articles.
• Support Windows Server builds/patching/troubleshooting, Active Directory, DNS, and hybrid identity (Entra Connect / Cloud Sync).
• Administer and troubleshoot VMware vSphere, ESXi, and vCenter where required within hybrid environments; contribute to workload migration, DR, and Business Continuity.

Technical Skills & Experience Essential:

• Hands-on enterprise Microsoft Azure operations (AZ-104 level), including Entra ID, RBAC, and access management.
• Azure networking and application delivery — VNets, NSGs, Private Endpoints/DNS, plus Front Door, Application Gateway, WAF, or API Management.
• Scripting and automation — PowerShell and Azure CLI, plus Python or Bash.
• Infrastructure as Code and DevOps — Terraform or Bicep/ARM, Azure DevOps pipelines, and Git.
• Monitoring — Azure Monitor, Log Analytics, Application Insights, and KQL.
• Windows Server and VMware vSphere/ESXi/vCenter administration; production support within ITIL incident/problem/change processes, including on-call.
• Must have DV clearance.

Desirable:

• Containers — Docker and Azure Kubernetes Service (AKS).
• GitHub Actions and GitHub Copilot.
• Security operations — Microsoft Defender for Cloud and Microsoft Sentinel.
• Hybrid — Azure Arc, Active Directory; integration services — Logic Apps, Service Bus, Event Grid.
• Public-sector / government environment experience (e.g. NZISM or similar frameworks).

Qualifications & Certifications

• Bachelor’s degree in Information Technology, Computer Science, Engineering, or equivalent practical experience.
• Microsoft Certified: Azure Administrator Associate (AZ-104), or equivalent hands‑on experience.
• Desirable: AZ-500 (Security), AZ-700 (Network), AZ-400 (DevOps Expert), HashiCorp Terraform Associate, or ITIL 4 Foundation.

Professional Attributes

• Strong ownership and accountability — calm and methodical during major incidents.
• Clear written and verbal communication with both technical and non-technical stakeholders.
• An automation-first, continuous-improvement mindset, with a habit of documenting and sharing knowledge.
• Willingness to coach and support other engineers.

About DXC Technology

At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive. Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available here. DXC Technology (NYSE: DXC) is a leading enterprise technology and innovation partner delivering software, services, and solutions to global enterprises and public sector organizations — helping them harness AI to drive outcomes at a time of exponential change with speed. With deep expertise in Managed Infrastructure Services, Application Modernization, and Industry-Specific Software Solutions, DXC modernizes, secures, and operates some of the world's most complex technology estates. Learn more on dxc.com.