Cloud Infrastructure Engineer
Fulltime | £43,918.00 – £51,238.00 (dependent on experience)
OSHQ – Southampton Hybrid
About the role
We are looking for a skilled Cloud Infrastructure Engineer to play a key role in designing and implementing Azure Landing Zones (ALZ) within a modern, enterprise‑scale environment. This is an exciting opportunity to help shape a secure, scalable, and compliant cloud platform, enabling teams to deliver services confidently and efficiently in Azure.
Key Responsibilities
- Develop and maintain Infrastructure as Code (IaC) using Bicep and Terraform
- Automate platform deployments via CI/CD pipelines (Azure DevOps)
- Configure and manage management groups, subscriptions, and governance controls
- Maintain networking components including hub‑and‑spoke, Azure Firewall, and private connectivity
- Embed security and compliance controls (e.g., RBAC, PIM, policies, Defender for Cloud)
- Collaborate with security, operations, and application teams to onboard workloads
- Troubleshoot platform issues and continuously improve reliability, governance and security
- Manage and harden Virtual Machines using Desired State Configuration
- Maintain centralised tooling to build Virtual Machine images using Image Builder / Packer
Required Skills & Experience
- Experience using Microsoft Azure
- Knowledge of Azure networking (vNets, DNS, Firewall, Private Endpoints)
- Identity & access management (Entra ID, RBAC, PIM)
- Governance (Azure Policy, Defender for Cloud, cost management)
- Experience with Infrastructure as Code (Bicep or Terraform)
- Familiarity with CI/CD pipelines and DevOps practices
- Solid troubleshooting and problem‑solving skills
- Ability to write user‑friendly documentation for an engineering audience
Desirable
- Hands‑on experience with Azure Landing Zones or enterprise‑scale cloud environments
- Experience with Azure Landing Zone Accelerator or CAF implementation
- Knowledge of security frameworks (NCSC guidance, CIS benchmarks, ISO 27001)
- Scripting skills (PowerShell, Azure CLI, or Python)
- Understanding of DNS, hybrid connectivity, or enterprise networking
- Azure certifications (e.g., AZ‑104, AZ‑305, AZ‑500, AZ‑700)
- Experience with Windows and Linux provisioning and security hardening
What’s important to us
- Competent use of source control and editors/IDEs
- Good grasp of cloud computing principles
- Passion for mentoring and sharing knowledge with others
- Enthusiasm for learning new skills and staying up to date
- Thriving in an agile, collaborative environment
The Rewards
- Competitive salary and pension (OS contribute up to 12.07%)
- Performance‑related bonus (where applicable)
- 28 days annual leave plus bank holidays (increasing with service)
- Enhanced family leave, including paid partner leave
- Hybrid and flexible working options
- Learning and development support, coaching and mentoring
- Free subscription to OS Maps and access to wellbeing support
- Volunteering leave and matched fundraising
Location
We have a fantastic HQ in Southampton, and we promote Hybrid Working where you will be required to spend 50% of your working hours in person at HQ.
Security
This role will require additional security vetting. It is conditional on holding or subsequently passing National Security Vetting (SC Clearance) prior to appointment.
Inclusion at OS
Research indicates that women, individuals with disabilities, LGBTQ+ community members, neurodiverse individuals, and people from ethnic minority backgrounds often hesitate to apply for jobs unless they meet every qualification. At Ordnance Survey, we are dedicated to fostering a diverse, inclusive, and genuine workplace where everyone can thrive. If you’re enthusiastic about this role but your experience doesn’t perfectly match every qualification in the job description, we encourage you to apply anyway. We are happy to consider any reasonable adjustments that people may need during the recruitment process, and you will be asked whether you require any during the application process.
Closing date
Sunday 12th July 2026 at 23:59pm
