Senior Cloud Engineer (Renewable Fixed Term Contract)

Matthey; Milton; On-site; GBP 70,000 - 110,000; Full time

Job summary

Johnson Matthey is seeking a Senior Cloud Engineer to administer and optimize Microsoft Azure environments, focusing on reliability, cost efficiency, and security. You will design and implement IaC templates with Terraform and Bicep and contribute to landing zone governance.

You will collaborate with infrastructure, network and security teams, manage patching via Update Manager, and support on‑call rotations in a 24/7 production setting while embracing hybrid cloud initiatives.

Qualifications

• 3–5 years of hands-on Azure administration and cloud operations.
• Experience with IaC using Terraform and/or Bicep.
• Familiarity with Azure governance, RBAC and Entra ID.
• Experience with Azure Update Manager for patch management.
• Strong written and verbal communication skills.

Responsibilities

• Administer and support Azure environments, including subscriptions, VNets, storage and compute.
• Develop and maintain IaC templates with Terraform and Bicep.
• Contribute to landing zone design and policy governance.
• Manage patching across Azure workloads with Update Manager and PIM.
• Monitor cloud health, troubleshoot incidents, and participate in on-call rotations.
• Collaborate with infrastructure, network and security teams; support hybrid cloud initiatives.

Skills

Azure administration

IaC tooling

Azure governance & security

Azure Policy / PIM

PowerShell / Azure CLI

On-call incident response

Cross-functional collaboration

Documentation

Tools

Terraform

Bicep

Job description

At Johnson Matthey, your work will matter. As a Senior Cloud Engineer, you’ll join a world leader in platinum group metals with over 200 years of history and innovation. You’ll help tackle the world’s biggest challenges - cutting emissions, powering modern society and enhancing lives - as we continue to apply, refine and recycle metals that matter, for a healthier and more resilient future.

Please note that this is a 1-year renewable contract position and candidates must currently be based in Malaysia with valid work rights as work visa sponsorship will not be provided.

The role:

• Administer and support Microsoft Azure environments, including subscriptions, resource groups, virtual networks, storage, and compute resources, ensuring availability, performance, and cost efficiency.
• Develop and maintain Infrastructure as Code (IaC) templates using Terraform and Bicep to automate provisioning, configuration, and consistent deployment of Azure resources.
• Support cloud architecture and design activities, contributing to landing zone setup, resource governance, and alignment with the Azure Well-Architected Framework.
• Manage patch compliance across Azure workloads using Azure Update Manager and support access and policy governance through Azure Policy and Privileged Identity Management (PIM).
• Monitor cloud resource health and performance, troubleshoot incidents, and participate in on-call rotations for critical cloud incident response.
• Collaborate cross-functionally with infrastructure, network, and security teams, maintain accurate documentation, and support hybrid cloud and migration initiatives.

Key skills that will help you succeed in this role:

• Able to commit to a one-year contract (renewable)
• Comfortable to work in an APAC & EMEA shift model
• 3–5 years of hands‑on experience in Microsoft Azure administration and cloud operations, including resource provisioning, identity/access management, and networking basics (VNets, NSGs)
• Practical, working experience with Infrastructure as Code tools, particularly Terraform and/or Bicep, for automating Azure deployments (deep architect-level IaC expertise is not required)
• Working knowledge of Azure governance and security controls, including Azure Policy, Privileged Identity Management (PIM), and Microsoft Entra ID (RBAC, Conditional Access)
• Familiarity with Azure Update Manager or equivalent tools for patch and compliance management across cloud workloads
• Intermediate scripting ability (PowerShell and/or Azure CLI) to support automation and day‑to‑day operational tasks
• Exposure to cloud architecture concepts and a willingness to develop further design and solutioning skills under mentorship.
• Clear verbal and written communication
• Comfortable working in high‑availability, 24/7 production environments

Preferred Qualifications:

• Microsoft Certified: Azure Administrator Associate (AZ-104), Azure Solutions Architect, or equivalent certification.
• Exposure to Microsoft AI Foundry or Azure AI/ML services (advantageous, not mandatory).
• Familiarity with hybrid cloud technologies such as Azure Local or Azure Arc, and their integration with on‑premises infrastructure.
• Experience with Azure monitoring tools (Azure Monitor, Log Analytics).
• Understanding of ITIL‑aligned change, incident, and problem management processes.

Ready to make a meaningful impact on your career and the environment? Join us and help shape a sustainable future while advancing your career!

At JM, inclusivity is central to our values. We create an environment where everyone can thrive, embracing diverse perspectives to tackle challenges and ensure all colleagues feel valued and connected.

For any queries or accessibility requirements, please contact [e-mail]. We will work with you to make suitable adjustments at any stage of the recruitment process. All conversations are confidential, and your feedback is welcome to help us provide an accessible and positive recruitment experience.

#LI-KV2

Johnson Matthey Plc is an equal opportunities employer and positively encourages applications from suitably qualified and eligible candidates regardless of sex, race, disability, age, sexual orientation, marriage or civil partnership, pregnancy or maternity, religion or belief.