Cloud Infrastructure Engineer

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Oversee internal and customer server infrastructure on Microsoft Azure, which includes VMs, Network Security Groups, ExpressRoute, and Application Gateways/WAF.

• Design, configure, and resolve issues related to network connectivity among customers, third parties, and the platform, encompassing site-to-site VPNs, routing, NAT/PAT, and DNS.

• Manage both internal and customer-facing Fortinet FortiGate firewalls.

• Establish and uphold connections to external trading, settlement, and market data services.

• Administer and support Active Directory, covering trusts, Kerberos delegation, certificate services, and certificate lifecycle management.

• Maintain and support Microsoft SQL Server, involving patching, monitoring, administration, high availability, and disaster recovery settings.

• Test and uphold backups and disaster recovery procedures, including invocation testing to fulfill contracted RPO/RTO commitments.

• Oversee and maintain the Microsoft 365 environment along with its associated tools.

• Manage external-facing infrastructure, such as web servers, reverse proxies, DNS, and public certificates.

• Conduct routine patching and maintenance of servers and firewalls.

• Maintain software and related components on Third Platform Services.

• Address IT audit and customer due diligence requests, providing necessary documentation and evidence.

• Collaborate with group information security to ensure infrastructure alignment with security policies, control frameworks, and audit mandates, while supporting remediation efforts for risks and vulnerabilities.

• Oversee relationships with third-party vendors and suppliers, including technical liaison, escalations, and coordinating changes.

• Create and maintain technical documentation, runbooks, and knowledge base articles.

• Monitor and react to alerts from infrastructure and monitoring platforms.

• Participate in infrastructure and security IT projects as required.

• Contribute to team planning initiatives.

⛳️ Requirements

• Demonstrated experience in a comparable technical position focused on infrastructure and cloud technology.

• Experience within an environment that provides and supports B2B customer-facing technology.

• Familiarity with working in a regulated or externally audited sector.

• Understanding of ISO 27001, SOC 2 / ISAE 3402 / AAF, CIS benchmarks/controls, or equivalent NIST frameworks.

• Proven expertise with Microsoft Azure and Windows Server administration.

• Strong skills in networking and firewall management, including NAT/PAT, site-to-site IPsec VPN, routing, and DNS.

• Advanced knowledge in Active Directory administration, including trusts, Kerberos delegation, and certificate management.

• In-depth understanding of Microsoft Entra ID / Azure AD, including Enterprise applications, SSO, Conditional Access, and hybrid identity.

• Experience in Microsoft SQL Server administration, including backup/restore, recovery, security/permissions, and SQL Agent job management.

• Knowledge of Windows-based IIS application management.

• Proficient in PowerShell scripting.

• Experience in Office 365 administration and automation.

• Familiarity with backup and disaster recovery tools and processes.

• Strong documentation capabilities.

• Experience in managing third-party vendors and suppliers.

• Desirable: Experience in Microsoft Dynamics CRM administration.

• Desirable: ADFS administration experience.

• Desirable: Knowledge in SQL Server high availability and disaster recovery design, such as Always On availability groups, clustering, and log shipping.

• Desirable: Experience with Microsoft BizTalk Server and Microsoft SharePoint Server administration.

• Desirable: Fortinet/FortiGate firewall administration experience.

• Desirable: Familiarity with monitoring platforms like PRTG, Grafana, or similar.

• Desirable: Experience with Atlassian Jira and Confluence.

• Industry-specific knowledge related to payment/settlement gateways, trading interfaces, CASS, or similar financial-market infrastructure.

• Knowledge of wealth management or stockbroking domain.

• Understanding of infrastructure automation tools such as Terraform.

• Excellent communication and interpersonal abilities.

• Capability to work independently and collaboratively with teams, customers, and vendors.

• Willingness to perform out-of-hours work for routine maintenance and occasional project tasks.

🏝️ Benefits

• Non-contributory pension.

• Bonus opportunities.

• Enhanced parental leave.

• Paid time off for emergencies.

• Health and wellbeing initiatives.

• Flexible working options.