Job Description hackajob is collaborating with Ordnance Survey to connect them with exceptional professionals for this role. Cloud Infrastructure Engineer
Fulltime | £43,918.00 - £51,238.00
(dependent on experience)
OSHQ - Southampton Hybrid
About OS
Join us in building the cloud platform that powers the geospatial data used across government, business, and everyday life.
Ordnance Survey is the national mapping agency for Great Britain, delivering worldclass geospatial data and services that underpin innovation and decision making across government, business, and everyday life. Our engineering teams build and operate the cloud platforms and tools that enable OS to deliver accurate, reliable data at scale — helping millions of people and organisations every day.
We’re passionate about using modern technology to make a meaningful impact, and we’re looking for engineers who share that enthusiasm.
Our Principles
At OS, how we work matters just as much as what we deliver. Throughout our hiring process we will assess competence assessing alignment in how you:
Clear the path
– Cut the noise, simplify and remove blockers so work can move at pace
Seek the story
– Listen fully, build understanding, fact‑check assumptions and speak up
Do what matters
– Focus on value, make deliberate stop/start/continue decisions, and recognise the contribution of others
About the role
We are looking for a skilled
Cloud Infrastructure Engineer
to play a key role in designing and implementing
Azure Landing Zones (ALZ)
within a modern, enterprise-scale environment.
This is an exciting opportunity to help shape a secure, scalable, and compliant cloud platform, enabling teams to deliver services confidently and efficiently in Azure.
You will work across engineering, security, and platform teams to build reusable infrastructure patterns, automate deployments, and embed good practices aligned with Microsoft’s Cloud Adoption Framework.
Important:
Please note that due to the nature of this work - this role is conditional on holding or subsequently passing National Security Vetting SC Clearance prior to appointment.
Key Responsibilities
Develop and maintain
Infrastructure as Code (IaC)
using Bicep and Terraform
Automate platform deployments via
CI/CD pipelines (Azure DevOps)
Configure and manage
management groups, subscriptions, and governance controls
Maintain
networking components
including hub-and-spoke, Azure Firewall, and private connectivity
Embed
security and compliance controls
(e.g., RBAC, PIM, policies, Defender for Cloud)
Collaborate with security, operations, and application teams to onboard workloads
Troubleshoot platform issues and continuously improve reliability, governance and security
Management and security hardening of Virtual Machines using Desired State Configuration
Maintenance of centralised tooling to build Virtual Machine images using Image Builder / Packer.
Required Skills & Experience
Experience using
Microsoft Azure
Knowledge of:
Azure networking (vNets, DNS, Firewall, Private Endpoints)
Identity & access management (Entra ID, RBAC, PIM)
Governance (Azure Policy, Defender for Cloud, cost management)
Experience with
Infrastructure as Code
(Bicep or Terraform)
Familiarity with
CI/CD pipelines and DevOps practices
Solid troubleshooting and problem-solving skills
Ability to write user friendly documentation for an engineering audience
Desirable
Hands-on experience with
Azure Landing Zones or enterprise-scale cloud environments
Experience with
Azure Landing Zone Accelerator
or CAF implementation
Knowledge of
security frameworks
(NCSC guidance, CIS benchmarks, ISO 27001)
Scripting skills (PowerShell, Azure CLI, or Python)
Understanding of
DNS, hybrid connectivity, or enterprise networking
Azure certifications (e.g., AZ-104, AZ-305, AZ-500, AZ-700)
Experience of Windows and Linux provisioning and security hardening.
What’s important to us
Competent use of source control a
or continue with email
Fulltime | £43,918.00 - £51,238.00
(dependent on experience)
OSHQ - Southampton Hybrid
About OS
Join us in building the cloud platform that powers the geospatial data used across government, business, and everyday life.
Ordnance Survey is the national mapping agency for Great Britain, delivering worldclass geospatial data and services that underpin innovation and decision making across government, business, and everyday life. Our engineering teams build and operate the cloud platforms and tools that enable OS to deliver accurate, reliable data at scale — helping millions of people and organisations every day.
We’re passionate about using modern technology to make a meaningful impact, and we’re looking for engineers who share that enthusiasm.
Our Principles
At OS, how we work matters just as much as what we deliver. Throughout our hiring process we will assess competence assessing alignment in how you:
Clear the path
– Cut the noise, simplify and remove blockers so work can move at pace
Seek the story
– Listen fully, build understanding, fact‑check assumptions and speak up
Do what matters
– Focus on value, make deliberate stop/start/continue decisions, and recognise the contribution of others
About the role
We are looking for a skilled
Cloud Infrastructure Engineer
to play a key role in designing and implementing
Azure Landing Zones (ALZ)
within a modern, enterprise-scale environment.
This is an exciting opportunity to help shape a secure, scalable, and compliant cloud platform, enabling teams to deliver services confidently and efficiently in Azure.
You will work across engineering, security, and platform teams to build reusable infrastructure patterns, automate deployments, and embed good practices aligned with Microsoft’s Cloud Adoption Framework.
Important:
Please note that due to the nature of this work - this role is conditional on holding or subsequently passing National Security Vetting SC Clearance prior to appointment.
Key Responsibilities
Develop and maintain
Infrastructure as Code (IaC)
using Bicep and Terraform
Automate platform deployments via
CI/CD pipelines (Azure DevOps)
Configure and manage
management groups, subscriptions, and governance controls
Maintain
networking components
including hub-and-spoke, Azure Firewall, and private connectivity
Embed
security and compliance controls
(e.g., RBAC, PIM, policies, Defender for Cloud)
Collaborate with security, operations, and application teams to onboard workloads
Troubleshoot platform issues and continuously improve reliability, governance and security
Management and security hardening of Virtual Machines using Desired State Configuration
Maintenance of centralised tooling to build Virtual Machine images using Image Builder / Packer.
Required Skills & Experience
Experience using
Microsoft Azure
Knowledge of:
Azure networking (vNets, DNS, Firewall, Private Endpoints)
Identity & access management (Entra ID, RBAC, PIM)
Governance (Azure Policy, Defender for Cloud, cost management)
Experience with
Infrastructure as Code
(Bicep or Terraform)
Familiarity with
CI/CD pipelines and DevOps practices
Solid troubleshooting and problem-solving skills
Ability to write user friendly documentation for an engineering audience
Desirable
Hands-on experience with
Azure Landing Zones or enterprise-scale cloud environments
Experience with
Azure Landing Zone Accelerator
or CAF implementation
Knowledge of
security frameworks
(NCSC guidance, CIS benchmarks, ISO 27001)
Scripting skills (PowerShell, Azure CLI, or Python)
Understanding of
DNS, hybrid connectivity, or enterprise networking
Azure certifications (e.g., AZ-104, AZ-305, AZ-500, AZ-700)
Experience of Windows and Linux provisioning and security hardening.
What’s important to us
Competent use of source control a
Sign in
To continue your applicationor continue with email
By continuing you agree to our Terms & Privacy Policy.
Similar jobs
Show more