Senior Cloud Network & Infrastructure Engineer — Azure & AWS
About the Role
We’re looking for a senior engineer who can own the full lifecycle of enterprise cloud and hybrid infrastructure across Azure and AWS. This isn’t a ticket-queue role — you’ll be designing, building, and improving the platforms that the business runs on, with real autonomy to make technical decisions and drive things forward.
What You’ll Be Doing
You’ll be the technical lead on cloud networking and infrastructure, working across a hybrid environment that spans on-prem and cloud. Day to day that means:
Designing and maintaining complex network environments across Azure and AWS — VNets, VPCs, routing, DNS, load balancing, firewalls, NSGs, Transit Gateway, Virtual WAN. The full stack.
Managing hybrid connectivity via VPN, ExpressRoute, and Direct Connect, and owning the network segmentation and landing zone strategy that underpins it all.
Building and maintaining Infrastructure-as-Code using Terraform (our preference) and integrating deployments into Azure DevOps or GitHub Actions pipelines. If you’re still doing things by hand, this role will change that.
Providing L3 support for infrastructure and network incidents, leading root cause analysis, and putting fixes in place that stick.
Working closely with solution architects, security, DevOps, and application teams — you’ll be a technical reference point across the business, not siloed in ops.
Contributing to cost governance: monitoring spend, implementing tagging and budget controls, and identifying waste across Azure and AWS accounts.
Keeping documentation honest — network topology, infrastructure designs, deployment pipelines, and service readiness handovers.
Mentoring junior engineers and contributing to the team’s technical growth.
What We’re Looking For
Strong hands-on experience across both Azure and AWS is non-negotiable. On the Azure side: VNet, Azure Firewall, Virtual WAN, Private Link, Network Monitor. On AWS: VPC, Transit Gateway, Route Tables, Security Groups, NACLs, IAM, Control Tower.
Solid networking fundamentals — routing, DNS, VPN, load balancing, segmentation. Cloud changes the tools, not the principles.
Practical experience with Terraform. ARM/Bicep or CloudFormation is useful, but Terraform is where we spend most of our time.
Familiarity with Zero Trust principles, identity-based access control (Entra ID / AWS IAM), and compliance requirements in a cloud context.
Experience with multi-account or multi-subscription governance and landing zone implementations (Azure CAF or AWS Landing Zone) is a strong plus.
Monitoring tool exposure — Azure Monitor, CloudWatch, New Relic — and backup platforms including Azure Backup, AWS Backup, and CommVault.
Qualifications
A degree in IT, Computer Science, or a related field, or equivalent practical experience. Certifications in Azure (Network Engineer Associate or Solutions Architect) or AWS (Solutions Architect or Advanced Networking) are well regarded but not a gate.
The Kind of Person Who’ll Thrive Here
You work well without being told what to do next. You spot inefficiencies and fix them without waiting to be asked. You can translate technical complexity for non-technical stakeholders without dumbing it down. And you’re the sort of engineer who leaves infrastructure better than you found it.
If this sounds like it might be a good fit, and you have the relevant experience then we’d love to hear from you.