Cloud Platform Engineer: Azure, Entra ID, Landing Zones, ADDS, Clearance
Our prestigious client is looking for Cloud Platform Engineer to support, maintain and develop enterprise cloud and hybrid platform services with a strong focus on Microsoft Azure, Entra ID, landing zones, infrastructure as code, automation, governance and secure platform operations. The role supports the organisation’s transition from legacy on-premises services to standardised, repeatable and secure cloud and hybrid platform capabilities while retaining operational awareness of existing services.
Start Date: ASAP
Duration: 60 Days
Paye: £373.07p/d
Holiday Pay: £50.51
Total Paye: £423.58
IR35 Status: Inside
Location: Role is mostly remote – with 1 to 2 days onsite in Portsmouth a week
NOTE: Active SC Clearance is highly desirable.
Responsibilities:
- Support Azure Landing Zone operations including management groups, subscriptions, RBAC, policies, monitoring, governance and platform standards.
- Develop, maintain and support Infrastructure as Code using appropriate tooling such as Terraform, Bicep, PowerShell, Azure CLI and pipeline automation.
- Administer and support Microsoft Entra ID capabilities including conditional access, identity governance, PIM, enterprise applications, roles and policies.
- Support hybrid identity patterns across Entra ID and AD DS, working with operational service teams where responsibilities overlap.
- Embed cost-aware engineering controls into platform design, including resource tagging, budget alerts, standard sizing patterns and non-production cost controls.
- Support cloud platform monitoring, alerting, resiliency, compliance and operational health.
- Contribute to platform engineering standards, reusable modules, technical documentation and service transition materials.
- Work with Architecture, Security, Network, Infrastructure, Identity and service teams to deliver consistent, secure and supportable platform solutions.
- Provide SME input to cloud adoption, migration and modernisation initiatives.
- Ensure platform changes follow agreed change, security, compliance and governance processes.
Skills/Experience:
- Azure landing zones, management groups, policy, RBAC and subscription governance.
- Infrastructure as Code and pipeline-based delivery methods.
- Microsoft Entra ID, AD DS integration and secure identity lifecycle management.
- Cloud monitoring, alerting, logging and operational health.
- Cost-aware platform engineering practices include tagging, sizing standards, budget alerts and automation.
- Security and governance principles aligned with organisational and NCSC expectations.
Soft Skills:
- Confident, proactive and collaborative team player.
- Strong ownership and problem-solving skills.
- Able to work across technical teams and communicate complex topics clearly.
- Customer-focused, quality-driven and comfortable working under pressure.
- Strong attention to detail and commitment to standardisation and documentation.