Senior Azure Cloud Security Engineer

Tesco UK; Welwyn Garden City; On-site; GBP 70,000 - 90,000; Full time

Job summary

A leading retail company is looking for an Azure Cloud Security Engineer in Welwyn Garden City. You will serve as the subject matter expert for Azure security, managing policy direction, assessing exemptions, and advising stakeholders on security initiatives. The ideal candidate will have over 5 years of Azure experience and strong communication skills, contributing to a culture of inclusivity and innovation within the team.

Qualifications

• Minimum 5 years' experience in a senior Azure architecture or engineering role.
• Ability to operate independently with limited support.
• Comprehensive knowledge of Microsoft Azure.

Responsibilities

• Manage Azure Policy direction and support exemptions.
• Ensure design, review, and delivery of Azure Policies.
• Assess suitability and impact of Azure policy exemptions.

Skills

Azure best practices

Azure CLI

PowerShell

Azure Graph REST API

Communication skills

Job description

Join as an Azure Cloud Security Engineer

Within the infrastructure security architecture team, your core purpose will be to act as the go-to subject matter expert between the wider Technology Security area and the Cloud Platform Engineering team for the large Microsoft Azure estate within Tesco. You will also support security teams within Technology Security to help them achieve their security goals, leveraging your knowledge and experience of Azure.

We’re looking for someone with experience working with Azure at an enterprise or equivalent scale, who understands the nuances of engaging with a broad range of engineering and infrastructure stakeholders. The candidate should have been responsible for designing and implementing security initiatives and supporting colleagues across the business, with the ability to understand, translate, and advise on Azure concepts to those who may lack Azure expertise.

Key Responsibilities

• Manage Azure Policy direction and support exemptions.
• Ensure the design, review, and delivery of upcoming Azure Policies, assessing their viability.
• Assess the suitability and impact of Azure policy exemptions at various scopes and create exemptions accordingly, providing approvals after assessments.
• Act as an SME advisor by assessing the impact of upcoming Azure security-related initiatives and ensuring compliance with security policies and standards.
• Support security architecture advice and review control appropriateness, working with key business functions.

Requirements

• Knowledge of Azure best practices and collaboration with teams.
• Experience with Azure CLI, PowerShell, or Azure Graph REST API.
• Minimum 5 years' experience in a senior Azure architecture or engineering role.
• Ability to operate independently with limited support and communicate effectively with experienced infrastructure, security, and software development engineers.
• Comprehensive knowledge of Microsoft Azure; familiarity with other cloud platforms is a plus but not essential.

About Tesco

Our vision is to become every customer's favourite way to shop, whether at home or on the move. Our core purpose is ‘Serving our customers, communities and planet a little better every day’. Serving means acting as a responsible and sustainable business for all stakeholders, communities, and the planet.

We pride ourselves on an inclusive culture where everyone can be themselves. We celebrate diversity and value the opportunities it brings. We are a Disability Confident Leader and committed to an accessible recruitment process. For accessibility support, please click here.

We offer flexible full-time and part-time working patterns across our business areas, combining office and remote work. Our offices are where we connect, collaborate, and innovate. Internal applicants should discuss flexible arrangements with the Hiring Manager. Everyone is welcome at Tesco.