Hybrid Cloud & Infrastructure as Code (IaC) Engineer

ByDesign Secure Systems Ltd; West of England; Hybrid; GBP 60,000 - 90,000; Full time

Job summary

ByDesign Secure Systems Ltd is seeking a Hybrid Cloud & IaC Engineer to join a mission critical, security-focused transformation for UK public sector systems. You will define and deploy secure hybrid infrastructure using Terraform/OpenTofu and Ansible across GCP/Azure and Dell Distributed Private Cloud, while aligning with enterprise standards and governance.

Role requires active SC/DV clearance or willingness to obtain, and work on-site or hybrid in London/Bristol with a strong emphasis on

Qualifications

• 5+ years of cloud engineering with heavy IaC focus.
• Hands-on automation engineering in enterprise environments.
• Experience with air-gapped or highly regulated environments.

Responsibilities

• Define and deploy hybrid infrastructure across GCP/Azure and Dell Distributed Private Cloud using IaC.
• Develop modular Terraform/OpenTofu code for landing zones.
• Automate compute, storage, and hypervisor configuration on Dell hardware.
• Establish automated playbooks for OS provisioning and test environment recreation.
• Create and maintain high-quality technical designs and runbooks.

Skills

Terraform/OpenTofu

Ansible

GCP/Azure

Dell Distributed Private Cloud

GitOps Pipelines

Security clearance

Tools

Terraform

Ansible

GCP

Azure

Job description

Hybrid Cloud & Infrastructure as Code (IaC) Engineer

This role is delivered within secure environments. Candidates must hold active SC/DV clearance and hold UK citizenship.

Join the Mission

At ByDesign Secure, we believe that world-class security shouldn't be an afterthought—it should be the foundation. We are an independent, outputs-based consultancy dedicated to solving the most complex data assurance challenges in the UK public sector. Currently, we working on a landmark transformation of a cross-government secure IT system. This is an exciting opportunity to help engineer a private cloud environment from the ground up and modernize the end-user services that power national decision-making. We don't believe in "billing by the hour" or rigid hierarchies; we are a lean, expert team focused on delivering high-impact technical outcomes. If you are a self-starter who thrives on autonomy and wants to see your engineering or architectural decisions shape the future of sovereign security, we want to talk to you.

About the Opportunity

Are you a Hybrid Cloud & Infrastructure as Code (IaC) Engineer with a passion for engineering secure, mission-critical systems?

We’re looking for an experienced Hybrid Cloud & Infrastructure as Code (IaC) Engineer with deep automation skills to join our team. You’ll be part of a multi-year transformation programme, shaping and implementing some of the most strategically significant government systems in operation today.

What You’ll Be Doing

Cloud automation expert responsible for defining and deploying hybrid infrastructure across GCP/Azure and Dell Distributed Private Cloud using IaC.

Develop modular, reusable Terraform / OpenTofu code for GCP/Azure public cloud landing zones.

Automate compute, storage, and hypervisor configuration on Dell Distributed Private Cloud hardware.

Establish automated Ansible playbooks for rapid OS provisioning and test environment recreation.

Provide support to a model office environment where we will have the capability to demonstrate capabilities to our end users to facilitate rapid feedback.

Operate and maintain solutions within disconnected, air-gapped, and security-sensitive environments, ensuring compliance with organisational security requirements.

Collaborate with architecture, security, and engineering teams to deliver solutions aligned with enterprise standards and best practices.

Develop and maintain technical documentation, including High-Level Designs (HLDs), Component-Level Designs (CLDs), Low-Level Designs (LLDs), operational procedures, and support runbooks.

Produce and present technical designs, implementation plans, and service improvements through governance and Technical Design Authority (TDA) processes as required.

What You’ll Bring

5+ Years Cloud Engineering with heavy Infrastructure as Code focus.

Proven hands-on experience as an automation Engineer operating in enterprise environments.

Practical hands-on knowledge of key technologies including: Terraform / OpenTofu, Ansible, GCP / Azure Public Cloud, Dell Distributed Private Cloud, GitOps Pipelines.

Experience working in environments without direct internet connectivity.

Confident working within highly regulated or classified environments where reliability and compliance are paramount.

Strong communicator — able to bridge technical and non-technical stakeholders effectively.

Good standard of written communication to enable high-quality design outputs to be produced.

Bonus Points For

Prior experience working on government classified systems or within secure data centre environments.

Experience of configuring and using AI technologies within cloud environments.

Familiarity with NCSC guidance, UK Government cloud policies, or cross-domain architectures.

Cloud Certifications.

Existing DV clearance.

Why This Role?

Work on high-impact, nationally significant projects that make a real difference.

Join a trusted specialist integrator with a proven record of secure delivery into UK Government.

Be part of a multi-year programme offering long-term stability and genuine career growth.

Clearance Requirements:

This role requires either an existing Security Clearance (SC level) or for one to be passed before commencement. There must be a willingness to undergo Developed Vetting (DV).

Work Location: Hybrid remote in London / Bristol

Job Types: Temporary, Fixed term contract (outside of IR35)

Screener Questions:

Do you hold UK nationality? (Required due to client security restrictions)

Do you currently hold active UK SC clearance?

Are you eligible and willing to undergo UK SC/DV clearance for this role? (Applications without this cannot be considered)

Does your delivery approach allow for on-site presence in London or Bristol when required (typically 3 days per week)?