Senior/Lead Azure Engineer - SC Cleared

We are seeking a suite of Azure specialists-at Lead, Senior, and Infrastructure levels-to join a flagship Cloud Engineering function within a major London-based government body. This team is responsible for the design, build, and governance of secure Azure Landing Zones and connectivity fabrics that underpin Critical National Infrastructure (CNI).
This is a high-stakes environment where resilience, security, and automation are paramount. You will be working on large-scale digital transformation projects that directly support the safety and security of the UK.

The Focus: You will act as the Technical Design Authority (TDA) for the Azure platform. You will own the architectural roadmap, define engineering standards, and lead a multi-disciplinary squad. You must be comfortable bridging the gap between high-level policy and low-level engineering execution in a CNI context.

Key Expertise: Expert-level Terraform (Module development), Azure Enterprise Scale, and Management Group governance. Experience leading engineering squads in highly regulated or "Secure-by-Design" environments is essential.

The Focus: You are the primary implementer of the platform's core services. You will build and automate the deployment of secure networking components, identity services, and monitoring stacks. You will also provide technical air cover and mentorship to the wider engineering team to ensure the platform remains robust and scalable.

Key Expertise: Advanced CI/CD pipeline construction (Azure DevOps), Azure Policy (Policy as Code), and deep experience with AKS (Azure Kubernetes Service).

The Focus: You will provide the operational engine room support, ensuring the Azure environment is resilient, patched, and performant. You will work within an Agile team to deploy resources according to established patterns and assist with incident resolution across dev, test, and production environments.

Key Expertise: Proficiency in PowerShell/Azure CLI, foundational Terraform usage, and a solid understanding of Azure Networking (VNETs, NSGs, and ExpressRoute).

Across all levels, you will operate within a high-security ecosystem using a modern "Infrastructure as Code" stack:

• Platform: Azure Landing Zones (ALZ)/Cloud Adoption Framework (CAF).
• Connectivity: ExpressRoute, VPN Gateways, and integration with SD-WAN fabrics.
• Security: Entra ID, Microsoft Sentinel, and Defender for Cloud (aligned to NCSC standards).
• Automation: 100% IaC approach using Terraform and Ansible.

• SC Clearance: Due to the nature of the systems and the CNI classification, an active SC clearance is a non-negotiable requirement for these positions.