Lead Engineer in Southampton

Join our Cloud Platform team as a Lead Engineer and help design, build, and evolve our Azure cloud platform, with Azure Landing Zones at its core. This is a hands‑on leadership role where you’ll play a key part in building a secure, scalable, and well‑governed cloud foundation — one that helps our product teams move quickly, experiment safely, and deliver great outcomes for our customers. You’ll set the technical direction for our Azure platform, lead the evolution of our landing zones, and act as a trusted sounding board across engineering, security, and architecture. You’ll work closely with a small, supportive team of Engineers and Senior Engineers, providing the platform that underpins our cloud‑hosted systems and enables development teams to do their best work. If you enjoy combining deep technical expertise with mentoring, collaboration, and real‑world impact, we want to hear from you.

Please note that due to the nature of this work, this role is conditional on holding or subsequently passing National Security Vetting SC Clearance prior to appointment.

What you’ll be doing:

• Own the design and evolution of Azure Landing Zones aligned to Microsoft Cloud Adoption Framework and enterprise good practices.
• Define and enforce platform standards for networking, identity, security, governance, and cost management.
• Build and maintain infrastructure as code (e.g. Bicep, Terraform) to deliver repeatable, self‑service platform capabilities.
• Own core Azure services including Management Groups, Subscriptions, Azure Policy, RBAC, networking (hub‑and‑spoke), and monitoring.
• Embed security‑by‑design, including identity, zero trust principles, logging, and threat protection.
• Partner with application and product teams to enable smooth onboarding onto the platform.
• Act as a technical leader and mentor for other cloud platform engineers.
• Influence cloud strategy and roadmap, balancing long‑term architecture with pragmatic delivery.
• Support platform operations, reliability, and continual improvement.

What we’re looking for:

• Strong experience as a Senior / Lead Cloud or Platform Engineer, ideally in Azure‑first or Azure‑centric environments.
• Deep understanding of Azure core services, especially: Entra ID (Azure AD), RBAC, Privileged Identity Management, Management Groups, Subscriptions & Azure Policy, Azure networking (vNets, hub‑and‑spoke, Private Endpoints, Firewalls, Express Route), Logging, monitoring, and cost management.
• Strong theoretical knowledge and practical experience in Infrastructure as Code (Bicep, Terraform, ARM).
• Practical experience embedding cloud security and governance at scale.
• Enjoy working collaboratively across engineering, architecture, and security.
• Able to explain complex cloud concepts in clear, approachable ways to a wide audience.

Desirable:

• Hands‑on delivery of Azure Landing Zones in enterprise‑scale environments.
• Azure certifications such as AZ-104, AZ‑305, AZ‑400, AZ‑500 & AZ-700.
• Experience enabling CI/CD for platform services.
• Experience in provisioning Virtual Machine images using Image Builder / Packer and Desired State Configuration to security harden them.
• Knowledge of Enterprise Azure Policy as Code (EPAC).
• Familiarity with FinOps or cloud cost optimisation practices.

What’s important to us:

• Proficient with source control systems and editors/IDEs.
• Comfortable programming in a contemporary object‑oriented language.
• A solid grasp of cloud computing principles.
• Passion for mentoring, learning, and sharing knowledge with others.
• Curiosity and enthusiasm for keeping your skills up to date.
• Thriving in an agile, collaborative environment.

Our Principles:

• Clear the path – Cut the noise, simplify and remove blockers so work can move at pace.
• Seek the story – Listen fully, build understanding, fact‑check assumptions and speak up.
• Do what matters – Focus on value, make deliberate stop/start/continue decisions, and recognise the contribution of others.

The Rewards:

• Competitive salary and pension (OS contribute up to 12.07%).
• Performance‑related bonus (where applicable).
• 28 days annual leave plus bank holidays (increasing with service).
• Enhanced family leave, including paid partner leave.
• Hybrid and flexible working options.
• Learning and development support, coaching and mentoring.
• Free subscription to OS Maps and access to wellbeing support.
• Volunteering leave and matched fundraising.

Interview Process:

• Stage 1 - Microsoft Teams Introduction (approx. 20 mins).
• Stage 2 – Competency based Interview (in person at OSHQ) w/c 10th August 2026.
• Stage 3 – Introduction with Chief Technology Officer or Head of Engineering.

Location & Working Pattern:

We embrace a hybrid working model at OS, because we believe in flexibility and balance. You’ll be based at our fantastic HQ in Southampton, Hampshire, where you'll spend 50% of your working week collaborating face-to-face with colleagues. It’s all about combining the best of both worlds connection and autonomy to help you thrive.

Security:

Please be advised that this role will require additional security vetting. OS conducts pre-employment checks for anyone made an offer of employment, including identity, right to work, employment history and criminal record checks (via Disclosure & Barring Services (DBS).

Closing date: Sunday 9th August 2026 at 23:59pm.

Inclusion at OS:

Research indicates that women, individuals with disabilities, LGBTQ+ community members, neurodiverse individuals, and people from ethnic minority backgrounds often hesitate to apply for jobs unless they meet every single qualification. At Ordnance Survey, we are dedicated to fostering a diverse, inclusive, and genuine workplace where everyone can thrive. If you’re enthusiastic about this role but your experience doesn’t perfectly match every qualification in the job description, we encourage you to apply anyway. You might be the ideal candidate for this or other roles within Ordnance Survey. We are happy to consider any reasonable adjustments that people may need during the recruitment process, and you will be asked whether you require any during the application process.