Senior Cloud Engineer

Key Responsibilities Leadership and Architecture Own the cloud and endpoint architecture, roadmap and standards. Lead major projects such as cloud migrations and Intune rollouts. Mentor engineers and act as the final technical escalation point. Work with Security and business leaders on risk, vendors and budgets.

Microsoft Azure Design and manage Azure subscriptions, VMs, storage, VNets, firewalls and ExpressRoute/VPN. Administer Entra ID: RBAC, Conditional Access, MFA and PIM. Apply governance, monitoring, backup and disaster recovery (Azure Policy, Monitor, Site Recovery).

AWS and VPC Networking Manage core AWS services (EC2, S3, RDS, Route 53) across multiple accounts with AWS Organizations. Design VPCs: CIDR planning, subnets, routing, NAT, Security Groups and NACLs. Build hybrid connectivity with Transit Gateway, Site-to-Site VPN and Direct Connect.

Secure and monitor workloads with IAM, CloudWatch, CloudTrail and GuardDuty. Microsoft Intune and Endpoint Management Manage Windows, macOS, iOS and Android devices in Intune. Run zero-touch enrolment with Autopilot, Apple Business Manager and Android Enterprise.

Own compliance, configuration and app policies, plus update rings and patching. Integrate Intune with Conditional Access and Defender for Endpoint. Required Qualifications 8+ years in infrastructure, including 5+ years running Azure and AWS in production at enterprise scale.

Expert in cloud networking: AWS VPC, Azure VNet, Transit Gateway, VPN, Direct Connect/ExpressRoute, BGP and DNS. 3+ years managing Intune at scale (1,000+ devices), including Autopilot. Deep knowledge of Entra ID, Conditional Access and identity federation. Strong PowerShell skills; Python is a plus.

Proven experience leading projects, mentoring engineers and presenting to senior stakeholders.

Preferred Qualifications

and Certifications Azure AZ-305 Solutions Architect Expert, AZ-700 Network Engineer AWS Solutions Architect – Professional, Advanced Networking – Specialty Intune MD-102 Endpoint Administrator Security SC-300 or AZ-500