senior cloud engineer

Key

Responsibilities

Leadership and Architecture

• Own the cloud and endpoint architecture, roadmap and standards.
• Lead major projects such as cloud migrations and Intune rollouts.
• Mentor engineers and act as the final technical escalation point.
• Work with Security and business leaders on risk, vendors and budgets.

Microsoft Azure

• Design and manage Azure subscriptions, VMs, storage, VNets, firewalls and ExpressRoute/VPN.
• Administer Entra ID: RBAC, Conditional Access, MFA and PIM.
• Apply governance, monitoring, backup and disaster recovery (Azure Policy, Monitor, Site Recovery).

AWS and VPC Networking

• Manage core AWS services (EC2, S3, RDS, Route 53) across multiple accounts with AWS Organizations.
• Design VPCs: CIDR planning, subnets, routing, NAT, Security Groups and NACLs.
• Build hybrid connectivity with Transit Gateway, Site-to-Site VPN and Direct Connect.
• Secure and monitor workloads with IAM, CloudWatch, CloudTrail and GuardDuty.

Microsoft Intune and Endpoint Management

• Manage Windows, macOS, iOS and Android devices in Intune.
• Run zero-touch enrolment with Autopilot, Apple Business Manager and Android Enterprise.
• Own compliance, configuration and app policies, plus update rings and patching.
• Integrate Intune with Conditional Access and Defender for Endpoint.

Required Qualifications

• 8+ years in infrastructure, including 5+ years running Azure and AWS in production at enterprise scale.
• Expert in cloud networking: AWS VPC, Azure VNet, Transit Gateway, VPN, Direct Connect/ExpressRoute, BGP and DNS.
• 3+ years managing Intune at scale (1,000+ devices), including Autopilot.
• Deep knowledge of Entra ID, Conditional Access and identity federation.
• Strong PowerShell skills; Python is a plus.
• Proven experience leading projects, mentoring engineers and presenting to senior stakeholders.

Preferred Qualifications and Certifications

Azure

• AZ-305 Solutions Architect Expert, AZ-700 Network Engineer

AWS

• Solutions Architect – Professional, Advanced Networking – Specialty

Intune

• MD-102 Endpoint Administrator

Security

• SC-300 or AZ-500