Senior Azure Cloud Network Engineer - Hybrid Environment

founderr United Kingdom
Remote
Apply
AI Summary

Design and deliver Azure networking projects, including hub-and-spoke and Virtual WAN. Collaborate on hybrid connectivity and identity integration. Requires 5+ years of Azure experience with strong networking depth.

Key Highlights
Growing infrastructure team in major UK not-for-profit
Hybrid environment with formal change management
Active Directory, Group Policy, and Windows Server experience
Key Responsibilities
Design and deliver hub-and-spoke and Virtual WAN networking
Build and maintain landing zones and governance aligned to Microsoft Cloud Adoption Framework
Own end-to-end delivery of platform changes
Contribute to migration of legacy on-prem services into Azure
Work across the seam with other teams on hybrid connectivity and identity integration
Technical Skills Required
Azure Networking Hub-and-Spoke Topology ExpressRoute Virtual WAN Hybrid Connectivity Active Directory Group Policy Windows Server
Benefits & Perks
£55k
Fully remote with occasional travel
Genuine social mission
Nice to Have
AZ-700 certification or willingness to work towards it
Bicep and Azure DevOps pipelines experience
Terraform concepts

Job Description


Remote (UK), permanent, £55k

A major UK not-for-profit going through a significant IT transformation is hiring an Azure Cloud Engineer to join its growing infrastructure team. This is the second of two seats. The first is already filled, and the team is looking for the right candidate to complete the line-up.



Why this one is differen

tMost Azure Cloud Engineer roles are written as a tool list. This one is written around a specific gap. The team needs someone with genuine Azure networking depth. Hub-and-spoke topology design, ExpressRoute, Virtual WAN, hybrid connectivity, NSGs and route table design at scale, Private Endpoints, and Azure Firewall. The estate is mid-consolidation, moving disparate legacy networks (BT corporate, MPLS, traditional hub-and-spoke) into a single Virtual WAN-based core. Someone who has architected and built in this space, not just operated within someone else's design, will land well


.
Equally important, the team want someone who came up through on-prem before moving into cloud. Active Directory, Group Policy, Windows Server, networking fundamentals, virtualisation. The estate is genuinely hybrid and will stay hybrid for the foreseeable future. The cloud-native-only profiles do not fit her


e.
What you will be do

ingThe role is project and architecture focused, currently 50/50 with BAU as a second-line support team beds in, moving to 80/20 project over the next 6 to 8 months. You wi

  • ll:Design and deliver hub-and-spoke and Virtual WAN networking, including ExpressRoute connectivity to on-prem data cent
  • resBuild and maintain landing zones, governance, and subscription architecture aligned to the Microsoft Cloud Adoption Framew
  • orkOwn end-to-end delivery of platform changes, from design through build to hando
  • verDeliver Infrastructure as Code using Bicep (primary) and Terraform, with CI/CD via Azure Dev
  • OpsContribute to the migration of legacy on-prem services into Az
  • ureWork across the seam with the Network and Comms team on hybrid connectivity, and with the Digital Workspace team on identity and endpoint integrat


ion
What you will b

  • ring5-plus years of hands-on Azure delivery, with genuine architectural networking experi
  • enceDeep understanding of hub-and-spoke topology, ExpressRoute, hybrid networking, and ideally Virtual WAN and Secure
  • HubStrong on-prem foundation: AD, Group Policy, DNS, Windows Server, virtualisa
  • tionHands-on with Bicep and Azure DevOps pipelines, with concepts in Terra
  • formComfortable in an enterprise hybrid environment with formal change management, CAB, and ITIL princi
  • plesIdeally AZ-700 (Azure Network Engineer Associate) or willingness to work towards it. AZ-104 and AZ-305 also va
  • luedIntellectually honest about where you are deep and where you are lighter. Confidence claims of "I'm strong across all of Azure" do not land


here
Why this client is worth the convers

  • ationGenuine social mission. Not-for-profit, supporting people in later life across nearly 1,700
  • sitesA leadership team that has been together over a decade and hires for long
  • evitySensible work-life balance, fully remote with occasional travel only when there is a real r
  • easonActive, well-funded transformation programme with broad exposure: hybrid networking, migration, identity, governance, telephony to cloud, data platform integra
  • tionsGenuine progression pathways. The architecture function is also growing, and the team explicitly does not pigeonhole engi


neers
Log

  • isti
  • cs£55kFully remote, occasional Bradford travel once a month a
  • t mostTwo-stage interview: 30-minute Teams first stage, then face-to-face final with a 30-minute presentation, technical and competency questions, and formal interview discussion. Final stage held in the South West rather than head


officeIf this sounds like you, send your CV and I will come back to you with detail on the client and the

team.

Similar Jobs

Explore other opportunities that match your interests

Visa Sponsorship Relocation Remote
Job Type Full-time
Experience Level Associate

Prism Digital

United Kingdom
Visa Sponsorship Relocation Remote
Job Type Contract
Experience Level Mid-Senior level

XpertDirect

United Kingdom

Senior DevOps Engineer

Devops
2d ago
Visa Sponsorship Relocation Remote
Job Type Full-time
Experience Level Not Applicable

Jobgether

United Kingdom

Subscribe our newsletter

New Things Will Always Update Regularly