Cloud Engineer

More than 9,000 organisations use our HR and payroll suite, from regional hospitals to school districts. On-call rotates weekly and pays a flat stipend whether or not the pager goes off.

The position:

Looking for a Cloud Engineer who wants to stay somewhere for a while. The operations team manages landing zones, networking and identity for every application team in the company. Remote within the UK. The team meets in London once a quarter, travel covered. You can set your own hours around a daily morning check-in.

Your responsibilities:

• Respond to infrastructure tickets and escalations within agreed SLAs.
• Patch cloud VMs with SSM Patch Manager or Azure Update Manager.
• Manage IAM roles, policies and Azure RBAC with least-privilege access.
• Apply security controls and fix findings from AWS Security Hub, Defender for Cloud or Wiz.
• Analyse monthly cloud bills and recommend Savings Plans, reservations or rightsizing.
• Keep architecture diagrams and runbooks current.
• Set up monitoring with CloudWatch, Azure Monitor or Datadog.
• Build and maintain AWS accounts or Azure subscriptions using a landing zone approach (Control Tower, Azure Landing Zones)

Qualifications:

• 3+ years of hands-on cloud infrastructure experience.
• Understanding of identity integration with Entra ID (Azure AD) or Okta.
• Strong knowledge of AWS or Azure core services (compute, storage, networking, IAM)
• Familiarity with CIS benchmarks, NIST or similar security frameworks.
• Scripting in Python, PowerShell or Bash.

Nice to have:

• GCP experience.
• AWS Solutions Architect Associate or Azure Administrator (AZ-104) certification.

Benefits:

• Healthcare cash plan.
• Company pension.
• 33 days holiday including bank holidays.
• Life assurance (4x salary)
• Enhanced maternity and paternity pay.

Start: Within 30 days.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Brassline Ltd.