Key responsibilities
- Manage and support Azure tenants, subscriptions, resource groups and cloud resources
- Configure, maintain and improve Azure infrastructure services including virtual machines, storage accounts, networking, DNS, web apps, application gateways and load balancing
- Support Azure governance, access control, security, cost management and operational best practice
- Act as a senior technical specialist across Azure and Microsoft cloud services
- Design, implement and support secure, scalable Azure cloud solutions
- Configure and improve Microsoft Entra ID, hybrid identity and Conditional Access policies
- Develop and maintain Azure Automation Runbooks and PowerShell scripts to improve operational efficiency
- Support the modernisation of legacy infrastructure into cloud-first services
- Provide technical assurance, documentation and best-practice guidance
- Support Microsoft 365 services, including Exchange Online and related collaboration platforms
- Support PKI, certificate services and wider infrastructure security requirements
- Contribute to disaster recovery, business continuity and service availability improvements
- Work with internal teams, suppliers and stakeholders to deliver secure and resilient technology services
- Mentor and support other engineers, acting as an escalation point for complex technical issues
Essential experience
- Strong hands-on Azure infrastructure engineering experience
- Experience managing Azure tenants, subscriptions, resource groups and resources within subscriptions
- Good understanding of Azure IaaS services such as virtual machines, networking, storage, DNS and load balancing
- Experience with Azure governance, access control, security and cost management principles
- Good knowledge of Microsoft Entra ID / Azure AD and hybrid identity
- Experience creating or managing Conditional Access policies
- Experience with Azure Automation Runbooks and PowerShell scripting
- Microsoft 365 / Exchange Online experience
- Ability to produce clear technical documentation and explain technical concepts to non-technical stakeholders
- Experience working in an operational environment with service improvement, incident/problem management and ITIL-style processes
Desirable experience
- Azure Virtual Desktop
- PKI / certificate services
- Exchange on-premise to Exchange Online / hybrid Exchange
- Azure landing zones
- Azure Policy / management groups
- Azure Monitor / Log Analytics
- Public sector, policing or secure environment experience
- Active Directory, Windows Server and broader Microsoft infrastructure experience