Azure Cloud Engineer

Remote (UK), permanent, £55k

A major UK not-for-profit going through a significant IT transformation is hiring an Azure Cloud Engineer to join its growing infrastructure team. This is the second of two seats. The first is already filled, and the team is looking for the right candidate to complete the line-up.

Why this one is differen

tMost Azure Cloud Engineer roles are written as a tool list. This one is written around a specific gap. The team needs someone with genuine Azure networking dept h. Hub-and-spoke topology design, ExpressRoute, Virtual WAN, hybrid connectivity, NSGs and route table design at scale, Private Endpoints, and Azure Firewall. The estate is mid-consolidation, moving disparate legacy networks (BT corporate, MPLS, traditional hub-and-spoke) into a single Virtual WAN-based core. Someone who has architected and built in this space, not just operated within someone else's design, will land well

.
Equally important, the team want someone wh o came up through on-prem before moving into clo ud. Active Directory, Group Policy, Windows Server, networking fundamentals, virtualisation. The estate is genuinely hybrid and will stay hybrid for the foreseeable future. The cloud-native-only profiles do not fit her

e.
What you will be do

ingThe role is project and architecture focused, currently 50/50 with BAU as a second-line support team beds in, moving to 80/20 project over the next 6 to 8 months. You wi

• ll:Design and deliver hub-and-spoke and Virtual WAN networking, including ExpressRoute connectivity to on-prem data cent
• resBuild and maintain landing zones, governance, and subscription architecture aligned to the Microsoft Cloud Adoption Framew
• orkOwn end-to-end delivery of platform changes, from design through build to hando
• verDeliver Infrastructure as Code using Bicep (primary) and Terraform, with CI/CD via Azure Dev
• OpsContribute to the migration of legacy on-prem services into Az
• ureWork across the seam with the Network and Comms team on hybrid connectivity, and with the Digital Workspace team on identity and endpoint integrat

ion
What you will b

• ring5-plus years of hands-on Azure delivery, with genuine architectural networking experi
• enceDeep understanding of hub-and-spoke topology, ExpressRoute, hybrid networking, and ideally Virtual WAN and Secure
• HubStrong on-prem foundation: AD, Group Policy, DNS, Windows Server, virtualisa
• tionHands-on with Bicep and Azure DevOps pipelines, with concepts in Terra
• formComfortable in an enterprise hybrid environment with formal change management, CAB, and ITIL princi
• plesIdeally AZ-700 (Azure Network Engineer Associate) or willingness to work towards it. AZ-104 and AZ-305 also va
• luedIntellectually honest about where you are deep and where you are lighter. Confidence claims of "I'm strong across all of Azure" do not land

here
Why this client is worth the convers

• ationGenuine social mission. Not-for-profit, supporting people in later life across nearly 1,700
• sitesA leadership team that has been together over a decade and hires for long
• evitySensible work-life balance, fully remote with occasional travel only when there is a real r
• easonActive, well-funded transformation programme with broad exposure: hybrid networking, migration, identity, governance, telephony to cloud, data platform integra
• tionsGenuine progression pathways. The architecture function is also growing, and the team explicitly does not pigeonhole engi

neers
Log

• isti
• cs£55kFully remote, occasional Bradford travel once a month a
• t mostTwo-stage interview: 30-minute Teams first stage, then face-to-face final with a 30-minute presentation, technical and competency questions, and formal interview discussion. Final stage held in the South West rather than head

officeIf this sounds like you, send your CV and I will come back to you with detail on the client and the