Senior Azure Cloud & Security Engineer

Bright Purple Resourcing Ltd; Glasgow; Hybrid; GBP 43,000 - 53,000; Full time

Job summary

Bright Purple Resourcing Ltd is partnering with a Glasgow-based online education provider to recruit an Azure Cloud & Security Engineer. The role is hybrid, with two days onsite in Glasgow, focusing on security, networking and identity across the Azure environment.

You'll own Azure security, Entra ID, PCI DSS alignment, and collaborate with IT, developers and partners to keep platforms compliant and well run; hands-on, with influence.

Qualifications

• 5+ years' hands-on Azure production experience.
• Strong Azure networking and Entra ID skills.
• Experience with PCI DSS, NIST, ISO 27001 or Cyber Essentials Plus.
• Proficient in PowerShell scripting.
• Ability to explain technical risk in plain English.

Responsibilities

• Designing and running Azure networking: VNets, NSGs, DNS, private endpoints, Front Door, WAF.
• Owning Entra ID, Conditional Access, PIM and RBAC, including HR automation.
• Leading PCI DSS v4.0 compliance and NIST alignment, from controls and evidence through to audits.
• Building automation with Logic Apps, Function Apps and PowerShell.
• Securing the MySQL and SQL Managed Instance estate alongside a specialist database partner.
• Managing MSP and consultant relationships, and coaching colleagues.

Skills

Azure in production

Azure networking

Entra ID

PCI DSS / NIST / ISO 27001

PowerShell scripting

risk communication

Tools

Intune

Terraform

Bicep

Defender for Cloud

Sentinel

AZ-500

SC-300

AZ-700

Job description

Azure Cloud & Security Engineer

Glasgow/Hybrid (2 days a week in the office)

Salary up to £48,000

Our client, an established online education provider based in Glasgow, runs its learning platform and business systems on Microsoft Azure and Microsoft 365. They're looking for a mid/senior engineer to take ownership of the security, networking and identity of that environment and set the standard for how it's run.

This is a hands‑on role with real influence. You'll be the go‑to person for Azure security, working with the IT team, developers and external partners to keep the platform secure, compliant and well run.

What you'll be doing

• Designing and running Azure networking: VNets, NSGs, DNS, private endpoints, Azure Front Door and WAF
• Owning Entra ID, Conditional Access, PIM and RBAC, including joiner, mover and leaver automation with HR
• Leading the technical side of PCI DSS v4.0 compliance and NIST alignment, from controls and evidence through to audits
• Building automation with Logic Apps, Function Apps and PowerShell
• Securing the MySQL and SQL Managed Instance estate alongside a specialist database partner
• Managing MSP and consultant relationships, and coaching colleagues

What you'll bring

• 5+ years' hands‑on experience with Azure in production
• Strong Azure networking and Entra ID skills
• Experience working to PCI DSS, NIST, ISO 27001 or Cyber Essentials Plus
• Confident PowerShell scripting
• The ability to explain technical risk in plain English

It would be a bonus if you know Intune and M365, infrastructure as code (Bicep or Terraform), or Defender for Cloud and Sentinel, or if you hold certifications such as AZ-500, SC-300 or AZ-700.

Bright Purple is proud to be an equal opportunities employer. We partner with clients who share our commitment to diversity and inclusion across the industry.