Cloud Infrastructure Engineer

Cloud Infrastructure EngineerFulltime | £43,918.00 – £51,238.00 (dependent on experience)OSHQ – Southampton HybridAbout OSJoin us in building the cloud platform that powers the geospatial data used across government, business, and everyday life.Ordnance Survey is the national mapping agency for Great Britain, delivering worldclass geospatial data and services that underpin innovation and decision making across government, business, and everyday life. Our engineering teams build and operate the cloud platforms and tools that enable OS to deliver accurate, reliable data at scale – helping millions of people and organisations every day.We’re passionate about using modern technology to make a meaningful impact, and we’re looking for engineers who share that enthusiasm.Our PrinciplesAt OS, how we work matters just as much as what we deliver. Throughout our hiring process we will assess competence assessing alignment in how you:Clear the path – Cut the noise, simplify and remove blockers so work can move at paceSeek the story – Listen fully, build understanding, fact‑check assumptions and speak upDo what matters – Focus on value, make deliberate stop/start/continue decisions, and recognise the contribution of othersAbout the roleWe are looking for a skilled Cloud Infrastructure Engineer to play a key role in designing and implementing Azure Landing Zones (ALZ) within a modern, enterprise-scale environment.This is an exciting opportunity to help shape a secure, scalable, and compliant cloud platform, enabling teams to deliver services confidently and efficiently in Azure.You will work across engineering, security, and platform teams to build reusable infrastructure patterns, automate deployments, and embed good practices aligned with Microsoft’s Cloud Adoption Framework.Important:Please note that due to the nature of this work – this role is conditional on holding or subsequently passing National Security Vetting SC Clearance prior to appointment.Key ResponsibilitiesDevelop and maintain Infrastructure as Code (IaC) using Bicep and TerraformAutomate platform deployments via CI/CD pipelines (Azure DevOps)Configure and manage management groups, subscriptions, and governance controlsMaintain networking components including hub-and-spoke, Azure Firewall, and private connectivityEmbed security and compliance controls (e.g., RBAC, PIM, policies, Defender for Cloud)Collaborate with security, operations, and application teams to onboard workloadsTroubleshoot platform issues and continuously improve reliability, governance and securityManagement and security hardening of Virtual Machines using Desired State ConfigurationMaintenance of centralised tooling to build Virtual Machine images using Image Builder / Packer.Required Skills & ExperienceExperience using Microsoft AzureKnowledge of: Azure networking (vNets, DNS, Firewall, Private Endpoints)Identity & access management (Entra ID, RBAC, PIM)Governance (Azure Policy, Defender for Cloud, cost management)Experience with Infrastructure as Code (Bicep or Terraform)Familiarity with CI/CD pipelines and DevOps practicesSolid troubleshooting and problem-solving skillsAbility to write user friendly documentation for an engineering audienceDesirableHands-on experience with Azure Landing Zones or enterprise-scale cloud environmentsExperience with Azure Landing Zone Accelerator or CAF implementationKnowledge of security frameworks (NCSC guidance, CIS benchmarks, ISO 27001)Scripting skills (PowerShell, Azure CLI, or Python)Understanding of DNS, hybrid connectivity, or enterprise networkingAzure certifications (e.g., AZ-104, AZ-305, AZ-500, AZ-700)Experience of Windows and Linux provisioning and security hardening.What’s important to usCompetent use of source control and editors/IDEsGood grasp of cloud computing principlesPassion for mentoring and sharing knowledge with othersEnthusiasm for learning new skills and staying up to date.Thriving in an agile, collaborative environmentFind out more:If you’d like to learn more about the role and the people with whom you’d be working, we are hosting two open sessions on Teams:Session 1: Friday 26 June – 12:30-13:10https://teams.microsoft.com/meet/34952066454389?p=hG6oYc69BZje6pnRX4Session 2: Wednesday 1 July 17:30-18:10https://teams.microsoft.com/meet/353338842961301?p=Q6nt2vu9zmkyQDQ0rMThese sessions are informal, completely optional, drop in when you can, and do not form part of the interview process. They are an opportunity to learn more and to ask questions. If you can’t make the whole session, feel free to join when you can. The sessions will not be recorded.Interview ProcessStage 1 – Microsoft Teams Introduction (approx. 15mins) w/c 20th July 2026Stage 2 – Competency based Interview (in person at OSHQ) w/c 27th July 2026SecurityPlease be advised that this role will require additional security vetting.OS conducts pre-employment checks for anyone made an offer of employment, including identity, right to work, employment history and criminal record checks (via Disclosure & Barring Services (DBS).Closing date: Sunday 12th July 2026 at 23:59pmInclusion at OSResearch indicates that women, individuals with disabilities, LGBTQ+ community members, neurodiverse individuals, and people from ethnic minority backgrounds often hesitate to apply for jobs unless they meet every single qualification. At Ordnance Survey, we are dedicated to fostering a diverse, inclusive, and genuine workplace where everyone can thrive.If you’re enthusiastic about this role but your experience doesn’t perfectly match every qualification in the job description, we encourage you to apply anyway. You might be the ideal candidate for this or other roles within Ordnance Survey.We are happy to consider any reasonable adjustments that people may need during the recruitment process, and you will be asked whether you require any during the application process.#J-18808-Ljbffr…