Senior Cloud Engineer

Key responsibilities

• Own the cloud and endpoint architecture, roadmap and standards.
• Lead major projects such as cloud migrations and Intune rollouts.
• Mentor engineers and act as the final technical escalation point.
• Work with Security and business leaders on risk, vendors and budgets.
• Design and manage Azure subscriptions, VMs, storage, VNets, firewalls and ExpressRoute/VPN.
• Administer Entra ID: RBAC, Conditional Access, MFA and PIM.
• Apply governance, monitoring, backup and disaster recovery (Azure Policy, Monitor, Site Recovery).
• Manage core AWS services (EC2, S3, RDS, Route 53) across multiple accounts with AWS Organizations.
• Design VPCs: CIDR planning, subnets, routing, NAT, Security Groups and NACLs.
• Build hybrid connectivity with Transit Gateway, Site‑to‑Site VPN and Direct Connect.
• Secure and monitor workloads with IAM, CloudWatch, CloudTrail and GuardDuty.
• Manage Windows, macOS, iOS and Android devices in Intune, including zero‑touch enrolment with Autopilot, Apple Business Manager and Android Enterprise.
• Own compliance, configuration and app policies, update rings and patching.
• Integrate Intune with Conditional Access and Defender for Endpoint.

Required qualifications

• 8+ years in infrastructure, including 5+ years running Azure and AWS in production at enterprise scale.
• Expert in cloud networking: AWS VPC, Azure VNet, Transit Gateway, VPN, Direct Connect/ExpressRoute, BGP and DNS.
• 3+ years managing Intune at scale (1,000+ devices), including Autopilot.
• Deep knowledge of Entra ID, Conditional Access and identity federation.
• Strong PowerShell skills; Python is a plus.
• Proven experience leading projects, mentoring engineers and presenting to senior stakeholders.

Preferred qualifications and certifications

• Azure AZ‑305 Solutions Architect Expert, AZ‑700 Network Engineer.
• AWS Solutions Architect – Professional, Advanced Networking – Specialty.
• Intune MD‑102 Endpoint Administrator.
• Security SC‑300 or AZ‑500.