Senior Cloud Engineer

Key

Responsibilities

Leadership and Architecture

• Own the cloud and endpoint architecture, roadmap and standards.

• Lead major projects such as cloud migrations and Intune rollouts.

• Mentor engineers and act as the final technical escalation point.

• Work with Security and business leaders on risk, vendors and budgets.

Microsoft Azure

• Design and manage Azure subscriptions, VMs, storage, VNets, firewalls and ExpressRoute/VPN.

• Administer Entra ID: RBAC, Conditional Access, MFA and PIM.

• Apply governance, monitoring, backup and disaster recovery (Azure Policy, Monitor, Site Recovery).

AWS and VPC Networking

• Manage core AWS services (EC2, S3, RDS, Route 53) across multiple accounts with AWS Organizations.

• Design VPCs: CIDR planning, subnets, routing, NAT, Security Groups and NACLs.

• Build hybrid connectivity with Transit Gateway, Site-to-Site VPN and Direct Connect.

• Secure and monitor workloads with IAM, CloudWatch, CloudTrail and GuardDuty.

Microsoft Intune and Endpoint Management

• Manage Windows, macOS, iOS and Android devices in Intune.

• Run zero-touch enrolment with Autopilot, Apple Business Manager and Android Enterprise.

• Own compliance, configuration and app policies, plus update rings and patching.

• Integrate Intune with Conditional Access and Defender for Endpoint.

Required Qualifications

• 8+ years in infrastructure, including 5+ years running Azure and AWS in production at enterprise scale.

• Expert in cloud networking: AWS VPC, Azure VNet, Transit Gateway, VPN, Direct Connect/ExpressRoute, BGP and DNS.

• 3+ years managing Intune at scale (1,000+ devices), including Autopilot.

• Deep knowledge of Entra ID, Conditional Access and identity federation.

• Strong PowerShell skills; Python is a plus.

• Proven experience leading projects, mentoring engineers and presenting to senior stakeholders.

Preferred Qualifications and Certifications

Azure

• AZ-305 Solutions Architect Expert, AZ-700 Network Engineer

AWS

• Solutions Architect – Professional, Advanced Networking – Specialty

Intune

• MD-102 Endpoint Administrator

Security

• SC-300 or AZ-500