Infrastructure Engineer

Nuffield Health; The Wells; On-site; GBP 60,000 - 100,000; Full time

Benefits offered by this job

Free gym membership

Health assessments

Retail discounts

Pension options

Job summary

Nuffield Health invites applications for a Senior Infrastructure Engineer to design, implement, and maintain core infrastructure across cloud and on‑prem environments, with a strong emphasis on Azure. The role blends hands‑on engineering with strategic thinking to ensure secure, reliable, and scalable platforms that underpin health‑care applications and services.

You will lead IaC efforts with Terraform and ARM/Bicep, collaborate with DevOps, Networking, Security and Product teams, mentor junior

Qualifications

• Proven experience designing and maintaining large-scale Azure cloud platforms.
• Hands-on experience with IaC and Terraform.
• Experience in security hardening, identity, and access controls.
• Strong collaboration across cross-functional teams.
• Mentoring and leadership capabilities.

Responsibilities

• Design and evolve cloud and on-prem infrastructure for scalability, reliability, and performance.
• Migrate apps and databases from on-prem to Azure Cloud.
• Implement identity, access control, and security best practices.
• Define IaC with Terraform, ARM/Bicep, or CloudFormation.
• Collaborate with DevOps, Networking, Security, and Engineering teams.
• Mentor junior engineers and contribute to infrastructure strategy.
• Document systems and architectural decisions clearly.
• Maintain monitoring/observability and cost optimization.

Skills

Azure Cloud

Terraform

Infrastructure as Code

PowerShell

Bash

RBAC

Entra ID

Key Vault

Networking

Monitoring

Documentation

Leadership

Tools

ARM/Bicep

CloudFormation

Job description

The Senior Infrastructure Engineer role is responsible for designing, implementing, and maintaining the core infrastructure that underpins the organisation's applications and services. This role blends hands-on engineering with strategic thinking, ensuring systems are secure, scalable, resilient, and aligned with long-term business goals. The engineer acts as a subject-matter expert, mentor, and key contributor to architectural decisions.,

• Design and evolve cloud and on-premises infrastructure with a focus on scalability, reliability, and performance, supporting migration of applications and databases from on-premise to Azure Cloud.
• Implementing identity, access control, and security best practices (Entra ID, RBAC, managed identities, Key Vault, secure baselines, patching)
• Implementation of infrastructure-as-code (IaC) using tools such as Terraform, ARM/Bicep, or CloudFormation.
• Collaborate with DevOps, Networking, Security, and Engineering teams to deliver integrated, compliant and robust Azure Cloud platform solutions and maintain clear documentation.
• Manage patching, vulnerability remediation, and secure configuration baselines., Partner with software engineering, product, and security teams to deliver robust and scalable solutions.
• Mentor junior engineers and contribute to building a high-performing infrastructure team.
• Influence technical direction and contribute to long-term infrastructure strategy.
• Document systems, processes, and architectural decisions clearly and effectively., Working across a variety of clinical applications that deliver various services connected to health care.
• Work closely with cross-functional product teams to design and implement appropriate cloud native solutions, codifying the infrastructure, configuration, and CI/CD pipelines to automate processes and improve efficiency.
• Work collaboratively with like-minded colleagues who are focused on improving the health of our nation and making a real difference to peoples' everyday lives.
• A core understanding and hands-on working experience with the Azure Cloud infrastructure, hosting and services e.g. IaaS, PaaS, Serverless computing, Databases and all-in-one Azure cloud-based solutions.
• Experience working with infrastructure-as-code, configuration and automation tools such as Terraform to provision and manage Cloud infrastructure and automate software delivery processes.
• Strong proficiency with Windows Server and Linux, and in automation and scripting (PowerShell, Bash).
• Experience with Azure identity services (Entra ID), RBAC, managed identities, and Key Vault.
• Experience designing and supporting highly available and resilient cloud environments (backup, restore, Disaster Recovery).
• Strong understanding of cloud security principles, including secure configuration, patching, and vulnerability management.
• Solid understanding of networking, load balancing, DNS, firewalls, and VPNs
• Experience implementing monitoring and observability solutions (Azure Monitor, Application Insights, New Relic, or similar).
• Optimise cost, performance, and resource utilisation across environments.
• Collaboration & Leadership,
• Strong analytical and problem-solving skills.
• Ability to lead complex technical initiatives with minimal oversight.
• Excellent communication skills, with the ability to explain technical concepts to non-technical stakeholders.
• A mindset focused on automation, reliability, and continuous improvement.
• Work within Product Engineering teams and collaborated closely with Product Owners, Architects, Designers, DevOps, QA and Delivery, enabling and upskilling teams in cloud platform capabilities, infrastructure-as-code, and operational tooling.
• We want you to love coming to work, feeling healthy, happy and valued. That's why we've developed a benefits package with you in mind. Here, you can choose from a range of fitness, lifestyle, health and fitness wellbeing rewards, such as free gym membership, health assessments, retail discounts and pension options.