Senior Cloud Engineer

Somerset Bridge Group; Bradley Stoke; Hybrid; GBP 55,000 - 60,000; Full time

Benefits offered by this job

Hybrid working (2 days in office)

25 days annual leave (27 after 2 years

30 days after 5 years

Discretionary annual bonus

Pension scheme

Flexible working

Wrkit wellbeing app

Religious bank holidays

Job summary

Somerset Bridge Group is seeking a Senior Cloud Infrastructure Engineer in Bristol on a fixed-term contract until March 2028. The role focuses on Azure-first architecture, secure and scalable cloud services, and modernising the on-prem environment while improving governance and cost-efficiency.

You will collaborate with the Technical Lead and team, sharing expertise, mentoring colleagues, and building cloud capability across IT Operations.

Qualifications

• Experience delivering cloud services in Azure.
• Hybrid AD/Entra with MFA experience.
• Strong security and governance focus.
• Ability to lead and mentor junior engineers.
• Excellent written and verbal communication.
• Ability to translate complex concepts to stakeholders.
• Willingness to work across on-prem and cloud migration.

Responsibilities

• Oversee the cloud infrastructure lifecycle including deployment and sizing.
• Manage firewall configurations to ensure security and performance (Azure and physical).
• Manage VMware and Pure Storage to support critical apps.
• Maintain core network services for reliable connectivity.
• Create Azure cost reports and FinOps for workloads.
• Administer Intune for device management.
• Oversee endpoint protection and threat mitigation.
• Coordinate pen test remediations.
• Develop infrastructure documentation and best practices.
• Provide mentorship and technical guidance to the team.

Skills

Azure Cloud Operations

Azure Entra

Active Directory

Security Best Practices

Networking (LAN/WAN, VPNs, firewalls)

IT infrastructure

Leadership / mentoring

Cost management / FinOps

Linux/Windows servers

Tools

VMware

Pure Storage

Intune

Tenable

Wiz/Mandiant

Sophos

Mimecast

Azure Policy

Job description

Fixed Term Contract - until March 2028 We’re looking for a Senior Cloud Infrastructure Engineer to help shape and strengthen our cloud‑first infrastructure. With a focus on Microsoft Azure, you’ll take a hands‑on role in delivering secure, scalable and high‑performing cloud services, while supporting the modernisation of our on‑premises environment. Working closely with the Technical Lead and wider infrastructure team, you’ll improve cloud governance, security and cost‑efficiency, drive continuous improvement, and help evolve our infrastructure to meet future business needs. You’ll also share your expertise and mentor colleagues, building cloud capability across the team and contributing to our long‑term digital success.

Department: [SBSS] IT Operations Team
Location: Bristol
Compensation: £55,000 - £60,000 / year
DescriptionFixed Term Contract - until March 2028 We’re looking for a Senior Cloud Infrastructure Engineer to help shape and strengthen our cloud‑first infrastructure. With a focus on Microsoft Azure, you’ll take a hands‑on role in delivering secure, scalable and high‑performing cloud services, while supporting the modernisation of our on‑premises environment. Working closely with the Technical Lead and wider infrastructure team, you’ll improve cloud governance, security and cost‑efficiency, drive continuous improvement, and help evolve our infrastructure to meet future business needs. You’ll also share your expertise and mentor colleagues, building cloud capability across the team and contributing to our long‑term digital success.
What You'll Be Responsible For Infrastructure Management

• Oversee the cloud infrastructure lifecycle, including deployment, configuration, right sizing.
• Manage firewall configurations and network infrastructure to ensure optimal security and performance (Azure and physical).
• Manage VMware environments and Pure Storage solutions to support critical business applications.

Core Services Oversight

• Maintain core network services to ensure reliable connectivity and performance.
• Manage M365 Backup Solution ensuring data integrity and availability.
• Create Azure cost reports for various stakeholders, ensuring FinOps capabilities are maintained for all deployed workloads.
• Manage Azure budget alerting configuration
• Collaborate with architecture team to deploy Azure Policy ensuring configuration drift is minimised.
• Administer Intune for device management and security compliance.
• Oversee Sophos management for endpoint protection and threat mitigation.

Data Centre and Infrastructure Operations

• Support data centre management to ensure efficient operation and resource utilisation and later migration from DC to Cloud.
• Coordinate penetration test (pen test) remediations to address vulnerabilities and strengthen security.
• Manage Mimecast for email security and archiving solutions.

Patching and Vulnerability Management

• Oversee Windows patching, ensuring compliance with organisational security standards.
• Collaborate with the Vulnerability Management Framework and Tenable to identify and remediate vulnerabilities.
• Implement Wiz/Mandiant monitoring for enhanced security visibility.
• Oversee infrastructure patching, including network devices, ensuring timely updates and security compliance.

Documentation and Best Practices

• Develop and maintain detailed infrastructure documentation, including configurations, processes, and standards.
• Establish and enforce best practices for system management and security protocols.

Collaboration and Support

• Work closely with the Infrastructure Technical Lead and other team members on projects and strategic initiatives.
• Provide technical support, mentorship, and guidance to junior engineers and team members.

What You'll Need

• Azure Cloud Operations - Wide and deep experience of delivering cloud services in Azure including WAF, VNETs, IaC, Cli scripting.
• Azure Entra and Active Directory - Proven experience of supporting a hybrid AD/Entra environment with MFA authentication
• Azure Security Best Practise
• Resilience: Ability to overcome obstacles and challenges to achieve operational targets.
• Self-Motivation: Proven ability to work independently while also contributing effectively within a team.
• Advanced Communication Skills: Exceptional written and verbal communication skills, with the ability to translate complex technical concepts into understandable language for non-technical stakeholders and senior management.
• Organisational Skills: Strong ability to manage multiple priorities and meet deadlines.
• Commercial Awareness: Understands the impact of infrastructure downtime on business operations and aligns IT solutions accordingly.
• Leadership: Ability to lead and mentor junior team members.
• Technical Expertise: Extensive experience in IT infrastructure roles, with proficiency in managing both physical and cloud-based systems. Deep technical expertise in networking (LAN/WAN, VPNs, firewalls), servers (Windows, Linux), storage solutions (e.g., VMware, Pure Storage), and virtualisation technologies (e.g., VMware).
• Networking & Security: Advanced knowledge of Active Directory, DNS, TCP/IP, and endpoint security tools (Tenable, Wiz/Mandiant, Sophos).
• Backup & Recovery: Experience with Commvault or similar solutions.
• Collaboration & Escalation: Strong team collaboration and ability to handle complex technical issues.

Our Benefits

• Hybrid working – 2 days in the office and 3 days working from home
• 25 days annual leave, rising to 27 days over 2 years’ service and 30 days after 5 years’ service. Plus bank holidays!
• Discretionary annual bonus
• Pension scheme – 5% employee, 6% employer
• Flexible working – we will always consider applications for those who require less than the advertised hours
• Flexi-time
• Healthcare Cash Plan – claim cashback on a variety of everyday healthcare costs
• Electric vehicle – salary sacrifice scheme
• 100’s of exclusive retailer discounts
• Professional wellbeing, health & fitness app - Wrkit
• Enhanced parental leave, including time off for IVF appointments
• Religious bank holidays – if you don’t celebrate Christmas and Easter, you can use these annual leave days on other occasions throughout the year.
• Life Assurance - 4 times your salary
• 25% Car Insurance Discount
• 20% Travel Insurance Discount
• Cycle to Work Scheme
• Employee Referral Scheme
• Community support day