Senior Cloud Engineer

Somerset Bridge Group; West of England; Hybrid; GBP 55,000 - 60,000; Full time

Benefits offered by this job

Hybrid working - 2 days in the office

25 days annual leave

Discretionary annual bonus

Pension scheme

Flexible working

Wrkit wellbeing app

Cycle to Work Scheme

Employee Referral Scheme

Community support day

Job summary

Somerset Bridge Group is seeking a Senior Cloud Engineer to shape our cloud-first infrastructure, focusing on Azure services, security, governance, and cost-efficiency. You will work with the Technical Lead and team to modernise on‑premises environments and mentor colleagues in cloud maturity.

You will oversee cloud lifecycle, security posture, and cross-functional collaboration, ensuring resilient, scalable services while supporting data centre migration to cloud.

Qualifications

• Azure Cloud Operations experience delivering cloud services in Azure.
• Experience supporting a hybrid AD/Entra environment with MFA.
• Proficiency in security best practices for cloud architectures.
• Ability to lead and mentor team members.
• Excellent written and verbal communication for stakeholders.

Responsibilities

• Oversee cloud infrastructure lifecycle: deployment, sizing, and configuration.
• Manage firewall and network infra for security and performance (Azure and on‑prem).
• Administer VMware environments and Pure Storage to support critical apps.
• Maintain core network services and Azure cost reporting for FinOps.
• Collaborate with architects to deploy Azure Policy and govern configurations.

Skills

Azure Cloud Operations

Hybrid AD/Entra

Cloud Security Best Practise

Leadership

Communication

Organisation

Networking & Security

Backup & Recovery

Collaboration & Escalation

Tools

VMware

Pure Storage

Tenable

Wiz/Mandiant

Sophos

Mimecast

Job description

Senior Cloud Engineer

Department: [SBSS] IT Operations Team

Employment Type: Fixed Term - Full Time

Location: Bristol

Compensation: £55,000 - £60,000 / year

Description

Fixed Term Contract - until March 2028
We're looking for a Senior Cloud Infrastructure Engineer to help shape and strengthen our cloud-first infrastructure. With a focus on Microsoft Azure, you'll take a hands-on role in delivering secure, scalable and high-performing cloud services, while supporting the modernisation of our on-premises environment. Working closely with the Technical Lead and wider infrastructure team, you'll improve cloud governance, security and cost-efficiency, drive continuous improvement, and help evolve our infrastructure to meet future business needs. You'll also share your expertise and mentor colleagues, building cloud capability across the team and contributing to our long-term digital success.

What you'll be responsible for:

Infrastructure Management

• Oversee the cloud infrastructure lifecycle, including deployment, configuration, right sizing.
• Manage firewall configurations and network infrastructure to ensure optimal security and performance (Azure and physical).
• Manage VMware environments and Pure Storage solutions to support critical business applications.

Core Services Oversight

• Maintain core network services to ensure reliable connectivity and performance.
• Manage M365 Backup Solution ensuring data integrity and availability.
• Create Azure cost reports for various stakeholders, ensuring FinOps capabilities are maintained for all deployed workloads.
• Manage Azure budget alerting configuration
• Collaborate with architecture team to deploy Azure Policy ensuring configuration drift is minimised.
• Administer Intune for device management and security compliance.
• Oversee Sophos management for endpoint protection and threat mitigation.

Data Centre and Infrastructure Operations

• Support data centre management to ensure efficient operation and resource utilisation and later migration from DC to Cloud.
• Coordinate penetration test (pen test) remediations to address vulnerabilities and strengthen security.
• Manage Mimecast for email security and archiving solutions.

Patching and Vulnerability Management

• Oversee Windows patching, ensuring compliance with organisational security standards.
• Collaborate with the Vulnerability Management Framework and Tenable to identify and remediate vulnerabilities.
• Implement Wiz/Mandiant monitoring for enhanced security visibility.
• Oversee infrastructure patching, including network devices, ensuring timely updates and security compliance.

Documentation and Best Practices

• Develop and maintain detailed infrastructure documentation, including configurations, processes, and standards.
• Establish and enforce best practices for system management and security protocols.

Collaboration and Support

• Work closely with the Infrastructure Technical Lead and other team members on projects and strategic initiatives.
• Provide technical support, mentorship, and guidance to junior engineers and team members.

What you'll need:

• Azure Cloud Operations - Wide and deep experience of delivering cloud services in Azure including WAF, VNETs, IaC, Cli scripting.
• Azure Entra and Active Directory - Proven experience of supporting a hybrid AD/Entra environment with MFA authentication
• Azure Security Best Practise
• Resilience: Ability to overcome obstacles and challenges to achieve operational targets.
• Self-Motivation: Proven ability to work independently while also contributing effectively within a team.
• Advanced Communication Skills: Exceptional written and verbal communication skills, with the ability to translate complex technical concepts into understandable language for non-technical stakeholders and senior management.
• Organisational Skills: Strong ability to manage multiple priorities and meet deadlines.
• Commercial Awareness: Understands the impact of infrastructure downtime on business operations and aligns IT solutions accordingly.
• Leadership: Ability to lead and mentor junior team members.
• Technical Expertise: Extensive experience in IT infrastructure roles, with proficiency in managing both physical and cloud-based systems. Deep technical expertise in networking (LAN/WAN, VPNs, firewalls), servers (Windows, Linux), storage solutions (e.g., VMware, Pure Storage), and virtualisation technologies (e.g., VMware).
• Networking & Security: Advanced knowledge of Active Directory, DNS, TCP/IP, and endpoint security tools (Tenable, Wiz/Mandiant, Sophos).
• Backup & Recovery: Experience with Commvault or similar solutions.
• Collaboration & Escalation: Strong team collaboration and ability to handle complex technical issues.

Our Benefits

• Hybrid working - 2 days in the office and 3 days working from home
• 25 days annual leave, rising to 27 days over 2 years' service and 30 days after 5 years' service. Plus bank holidays!
• Discretionary annual bonus
• Pension scheme - 5% employee, 6% employer
• Flexible working - we will always consider applications for those who require less than the advertised hours
• Flexi-time
• Healthcare Cash Plan - claim cashback on a variety of everyday healthcare costs
• Electric vehicle - salary sacrifice scheme
• 100's of exclusive retailer discounts
• Professional wellbeing, health & fitness app - Wrkit
• Enhanced parental leave, including time off for IVF appointments
• Religious bank holidays - if you don't celebrate Christmas and Easter, you can use these annual leave days on other occasions throughout the year.
• Life Assurance - 4 times your salary
• 25% Car Insurance Discount
• 20% Travel Insurance Discount
• Cycle to Work Scheme
• Employee Referral Scheme
• Community support day