Senior Azure Cloud Security Architect - Enterprise Scale

Tesco UK; Welwyn Garden City; Hybrid; GBP 90,000 - 130,000; Full time

Job summary

Tesco Stores Limited is seeking a Senior Cloud Security Engineer to bridge Technology Security and Cloud Platform Engineering for Tesco's large Azure estate. You will design and implement Azure security controls, advise stakeholders, and drive policy compliance across multiple teams and environments.

You will communicate complex Azure concepts to non-experts, partner with Infrastructure and Platform teams, and help shape security initiatives while working in a flexible hybrid model.

Qualifications

• Minimum 5 years' experience in a senior Azure architecture or engineer role.
• Demonstrable experience with Azure CLI, PowerShell or Azure Graph REST API.
• Ability to operate independently with limited support and communicate with senior engineers.

Responsibilities

• Manage Azure Policy direction and support exemptions.
• Design, review and deliver Azure Policies; assess viability and approach.
• Assess impact of Azure policy exemptions at team/environment/global scale and create exemptions.
• Act as SME advisor; assess impact of security initiatives and ensure policy compliance.
• Deliver through centralised controls or by reducing friction for infra consumption.
• Provide security architecture advice and review control appropriateness for business functions.
• Collaborate with Cloud Platform Engineering and Infrastructure Architect teams on security deliverables.

Skills

Azure expertise

Azure CLI

PowerShell

Azure Graph API

Security architecture

Stakeholder comms

Job description

Tesco Stores Limited is seeking a Senior Cloud Security Engineer to bridge Technology Security and Cloud Platform Engineering for Tesco's large Azure estate. You will design and implement Azure security controls, advise stakeholders, and drive policy compliance across multiple teams and environments.

You will communicate complex Azure concepts to non-experts, partner with Infrastructure and Platform teams, and help shape security initiatives while working in a flexible hybrid model.