Cloud Infrastructure Engineer
Full time. Salary: £43,918.00 – £51,238.00, depending on experience. Location: OSHQ – Southampton, hybrid (50% in person).
About Ordnance Survey
Ordnance Survey is the national mapping agency for Great Britain, delivering geospatial data and services that underpin innovation and decision‑making across government, business and everyday life. Our engineering teams build and operate the cloud platforms and tools that enable OS to deliver accurate, reliable data at scale.
About the Role
We are looking for a skilled Cloud Infrastructure Engineer to design and implement Azure Landing Zones (ALZ) within a modern, enterprise‑scale environment, helping to shape a secure, scalable and compliant cloud platform.
Important
The role is conditional on holding or subsequently passing National Security Vetting SC Clearance prior to appointment.
Key Responsibilities
- Develop and maintain Infrastructure as Code (IaC) using Bicep and Terraform.
- Automate platform deployments via CI/CD pipelines (Azure DevOps).
- Configure and manage management groups, subscriptions and governance controls.
- Maintain networking components including hub‑and‑spoke, Azure Firewall and private connectivity.
- Embed security and compliance controls such as RBAC, PIM, policies and Defender for Cloud.
- Collaborate with security, operations and application teams to onboard workloads.
- Troubleshoot platform issues and continuously improve reliability, governance and security.
- Manage and harden virtual machines using Desired State Configuration.
- Maintain centralised tooling to build virtual machine images using Image Builder and Packer.
Required Skills & Experience
- Experience using Microsoft Azure.
- Knowledge of Azure networking (vNets, DNS, Firewall, Private Endpoints).
- Identity & access management (Entra ID, RBAC, PIM).
- Governance (Azure Policy, Defender for Cloud, cost management).
- Experience with Infrastructure as Code (Bicep or Terraform).
- Familiarity with CI/CD pipelines and DevOps practices.
- Solid troubleshooting and problem‑solving skills.
- Ability to write user‑friendly documentation for an engineering audience.
Desirable
- Hands‑on experience with Azure Landing Zones or enterprise‑scale cloud environments.
- Experience with Azure Landing Zone Accelerator or CAF implementation.
- Knowledge of security frameworks (NCSC guidance, CIS benchmarks, ISO 27001).
- Scripting skills (PowerShell, Azure CLI or Python).
- Understanding of DNS, hybrid connectivity or enterprise networking.
- Azure certifications (e.g., AZ‑104, AZ‑305, AZ‑500, AZ‑700).
- Experience of Windows and Linux provisioning and security hardening.
What’s Important To Us
- Competent use of source control and editors/IDEs.
- Good grasp of cloud computing principles.
- Passion for mentoring and sharing knowledge with others.
- Enthusiasm for learning new skills and staying up to date.
- Thriving in an agile, collaborative environment.
Find Out More
If you’d like to learn more about the role, we are hosting two open sessions on Teams:
Session 1 – Friday 26 June, 12:30–13:10 (
Session 2 – Wednesday 1 July, 17:30–18:10 ( These sessions are informal and optional.
The Rewards
Competitive salary and pension, performance‑related bonus, 28 days annual leave plus bank holidays, hybrid and flexible working, learning and development support, coaching and mentoring.
Benefits
- Competitive salary and pension (OS contributes up to 12.07%).
- Performance‑related bonus (where applicable).
- 28 days annual leave plus bank holidays (increasing with service).
- Enhanced family leave, including paid partner leave.
- Hybrid and flexible working options.
- Learning and development support, coaching and mentoring.
- Free subscription to OS Maps and access to wellbeing support.
- Volunteering leave and matched fundraising.
Location
Our HQ in Southampton. Hybrid working means you will be required to spend roughly 50% of your working hours on site.
Interview Process
- Stage 1 – Microsoft Teams introduction (approx. 15 min) w/c 20th July 2026.
- Stage 2 – Competency‑based interview (in person at OSHQ) w/c 27th July 2026.
Security
The role requires additional security vetting. OS conducts pre‑employment checks, including identity, right to work, employment history and DBS checks.
Closing Date
Sunday 12th July 2026 at 23:59 pm.
Inclusion at OS
Ordnance Survey is committed to a diverse, inclusive workplace. We welcome applicants who may not meet every qualification, and we consider reasonable adjustments as needed.
Skills Required For This Role
Computer Coding, Computer Programming, Delivery Methodologies, Software Components, Software Development, Software Engineering, Troubleshooting.
#J-18808-Ljbffr
