About This Role
Operating and maintaining cloud infrastructure across various providers is the core of this engineering role, ensuring high availability, performance, and resilience. This position suits a cloud engineer with hands-on experience in cloud operations and a strong focus on automation and security.
Responsibilities
- Operate, maintain, and support workloads and infrastructure running across AWS, Azure, and/or GCP, ensuring availability, performance, and resilience targets are met
- Provision and manage cloud resources through Cloud Service Provider (CSP) accounts, using the platform’s automated account-vending and self-service capabilities
- Perform routine operational tasks: patching, backup and restore, capacity management, certificate and secrets rotation, and configuration management
- Support landing-zone and network configuration (segmentation, connectivity, DNS, load balancing) in line with platform standards
- Maintain operational runbooks, standard operating procedures, and configuration documentation
- Implement and maintain monitoring, logging, alerting, and observability across infrastructure and applications using cloud-native and platform tooling
- Respond to incidents and service requests within agreed SLAs; perform triage, diagnosis, escalation, and resolution, including participation in an on-call roster
- Conduct root-cause analysis and drive problem management to prevent recurrence; contribute to post-incident reviews
- Support disaster-recovery planning, backup verification, and recovery exercises (RPO/RTO objectives)
- Build, maintain, and version infrastructure using Infrastructure-as-Code (e.g., Terraform) and configuration-management tooling
- Develop automation scripts and pipelines to reduce manual effort, standardise deployments, and improve consistency
- Support CI/CD pipelines and DevSecOps practices, integrating with tools such as SHIP-HATS where applicable
- Ensure all cloud activities comply with IM8, security policies, and guardrails, including hardened baselines and CIS-aligned configurations
- Support Policy-as-Code controls for continuous security compliance, remediating drift and non-compliant resources
- Manage identity and access in line with least-privilege principles, using platform single-sign-on and approved access paths
- Support audit, vulnerability management, and remediation activities, and maintain evidence for security reviews
- Monitor cloud consumption and support cost-optimisation initiatives (right-sizing, scheduling, reserved/committed-use planning, eliminating waste)
- Provide usage and cost reporting and recommendations to agencies and stakeholders
- Work with application teams, agency stakeholders, security teams, and the cloud platform team to onboard, migrate, and support workloads
