Cloud Operations Engineer

The Function

The Digital and Technology function designs, builds and maintains the systems that power Triple Point. It enables secure connectivity, reliable services and innovation, helping colleagues and partners work effectively.

The Team

Technical Operations & Cyber keeps our technology secure, resilient and reliable while improving the cloud platforms and services colleagues use every day. The team works closely with the wider Digital and Technology function, our managed service provider (MSP), security operations centre (SOC) and business stakeholders.

Key Responsibilities

The Role

We're looking for a hands-on Cloud Operations Engineer to operate and continuously improve our Microsoft Azure and Microsoft 365 environment. You'll help keep cloud services secure, available and well governed as we expand our use of cloud services, AI tools and automation.

Working with the Head of Technology Operations & Cyber, Senior Cyber Engineer, Senior DevOps Engineer and external partners, you'll manage identity, endpoints, infrastructure, monitoring and recovery. You'll investigate complex issues, communicate risks clearly, document solutions and reduce recurring manual work.

1. Cloud platforms, identity and endpoints

• Administer Azure and Microsoft 365 services, monitoring availability, performance and operational security.
• Manage Entra ID and Active Directory operations, including joiner/mover/leaver processes, groups, role-based access control, Conditional Access, privileged identities and service accounts, in coordination with the Senior Cyber Engineer.
• Maintain Microsoft Intune enrolment, device compliance, application protection and endpoint configuration.
• Support Azure-hosted Windows Server workloads and relevant DNS and DHCP services, simplifying or retiring unnecessary infrastructure where appropriate.
• Manage Azure networking, including virtual networks, network security groups, DNS zones, private endpoints and load balancers.
• Operate Azure Backup and Azure Site Recovery; test recovery arrangements and keep runbooks current.
• Support and maintain physical infrastructure including office networking, firewalls, switching and print services, working with the MSP and vendors to keep on-premises components well managed and aligned to cloud-first principles.

2. Monitoring, incidents and service improvement

• Build and improve meaningful alerts, dashboards and observability using Azure Monitor, Log Analytics and Kusto Query Language (KQL).
• Investigate complex incidents, coordinate resolution with the MSP and other teams, and document root causes and preventive actions.
• Maintain operational runbooks and contribute to ITIL-aligned incident, problem and change management.
• Use service trends and monitoring data to identify emerging risks and recommend improvements.

3. Security and resilience

• Coordinate patching and vulnerability remediation, prioritising action by risk and business impact.
• Work with the Senior Cyber Engineer on security baselines and Microsoft Defender controls across Azure, Microsoft 365 and endpoints.
• Help manage access-control exceptions with appropriate governance and support audits, Cyber Essentials assessments and relevant regulatory reviews.
• Recommend proportionate controls that balance security, reliability and usability.

4. Automation, cost and collaboration

• Use PowerShell and other appropriate tools to automate repeatable tasks and improve consistency.
• Work with the Senior DevOps Engineer to read, run and maintain infrastructure-as-code templates, including Bicep or Terraform.
• Monitor cloud costs and recommend tagging, right-sizing and other opportunities to reduce waste.
• Prioritise work transparently, explain technical trade-offs to non-technical colleagues, collaborate with suppliers and share knowledge across the team.

Experience

Essential

• Hands-on experience operating production cloud services, particularly Microsoft Azure and Microsoft 365.
• Practical experience with Entra ID/Active Directory, identity lifecycle, RBAC, Conditional Access and privileged access management.
• Experience managing endpoints with Intune and supporting Azure networking and cloud-hosted workloads.
• Familiarity with physical network infrastructure including firewalls, switching and print services, sufficient to support day-to-day operations and coordinate with vendors and the MSP.
• Ability to configure monitoring and investigate issues using Azure Monitor, Log Analytics and KQL.
• Working knowledge of Microsoft 365 services (Exchange Online, SharePoint Online, Teams and OneDrive) and relevant security controls.
• Experience with backup, disaster recovery, documented recovery procedures and testing.
• Familiarity with Microsoft Defender technologies, patching and risk-based vulnerability remediation.
• PowerShell scripting skills and an understanding of cloud cost optimisation.
• Experience collaborating through incident, problem and change processes, including with external service partners.
• Clear communication, sound judgement and a practical approach to ownership and continuous improvement.

Desirable

• Experience with infrastructure as code (Bicep, Terraform or ARM) and/or Python or Bash automation.
• Exposure to Microsoft Sentinel, KQL workbooks or security alert tuning alongside a SOC.
• Experience with hybrid virtualisation or SaaS integrations such as Salesforce.
• Experience in a regulated environment, ideally FCA-regulated.
• Certifications such as AZ-104, AZ-305, AZ-500, SC-300 or MS-102, or equivalent practical experience.

Personal Qualities:

What Success Looks Like

Success in this role combines reliable technical delivery with the behaviours in Triple Point's High Performance Framework:

Own It

• Takes responsibility for service health and quality, follows incidents through to resolution and communicates progress without prompting.

Stay Curious

• Seeks feedback, learns emerging cloud and AI capabilities thoughtfully, and uses evidence to improve reliability and reduce repetitive work.

Take Thoughtful Action

• Prioritises by impact and risk, makes well-reasoned decisions and translates complex issues into clear next steps.

Pull Together

<