What you'll bring to the team
Cloud & Server Engineer
Location: London/Hybrid
Hours: 37.5 hours per week
Contract: Permanent - Salaried
The Cloud & Server Platform Engineer oversees the operation, optimisation, and governance of the organisation's cloud, hybrid, and on prem environments. Working closely with the Solution Architecture team and other technology functions, they design and deliver infrastructure solutions that meet both business and technical requirements.
This role is accountable for ensuring the performance, security, and scalability of core platform services that support data, applications, and integration workloads. The Engineer ensures platforms, including Azure and other relevant cloud providers, remain aligned with organisational objectives. Collaborating with IT, engineering, and security teams to maintain reliable and efficient operations.
Azure Platform Engineering & DevOps
- Design, build and evolve scalable Azure infrastructure (compute, networking, storage, identity, PaaS/serverless)
- Define and maintain platform architectures, standards and design patterns
- Implement Azure governance (Landing Zones, Policies, Cost Management) ensuring compliance and cost control
- Establish monitoring, observability, backup and disaster recovery frameworks
DevOps & Automation
- Build and manage CI/CD pipelines (Azure DevOps/GitHub Actions)
- Deliver Infrastructure as Code using Terraform
- Develop automation tooling (PowerShell, Azure CLI, Python) for provisioning, configuration and scaling
- Drive containerisation and modern workload adoption (Docker, AKS)
- Continuously improve automation, reliability and operational efficiency
Standards, Governance & Support
- Define platform policies, guardrails and operational standards
- Own runbooks, SOPs and knowledge documentation
- Act as L3 escalation for complex platform issues and lead root cause analysis
- Drive capacity planning, cost optimisation and self service capability
Solution Engineering & Collaboration
- Partner with architects and product teams to deliver fit for purpose Azure solutions
- Ensure alignment with Well Architected Framework and business requirements
- Support integration across cloud and on prem systems
- Work with vendors and Microsoft on strategic and complex issues
Security & Compliance
- Embed security best practice (RBAC, DevSecOps, Key Vault, policy as code)
- Ensure compliance with internal standards and frameworks (e.g. ISO 27001, GDPR)
- Support risk management and remediation of vulnerabilities
Communication & Reporting
- Report on platform health, performance and cost optimisation
- Communicate platform changes, roadmaps and architecture decisions
- Provide clear documentation and knowledge transfer to operational teams
Qualifications & Experience
Required
- Bachelor's degree in Computer Science, Information Technology, or a related field (or equivalent experience).
- 3+ years of hands on experience with Microsoft Azure, including IaaS, PaaS, networking, identity (Entra ID), and governance services.
- 2+ years of experience with DevOps tooling and practices, including CI/CD pipelines (Azure DevOps or GitHub Actions), Infrastructure as Code (Terraform, Bicep, or ARM), and version control (Git).
- 2+ years' experience in infrastructure design, platform engineering, or architecture.
- Strong proficiency with automation and scripting- PowerShell, Azure CLI, Python, or Bash.
- Solid understanding of containerisation (Docker) and familiarity with orchestration platforms (Azure Kubernetes Service).
- Deep understanding of cloud architecture, deployment patterns, and management best practices, including the Azure Well Architected Framework.
- Experienced in defining standards, governance frameworks, and reference architectures for cloud platform consumption.
- Strong knowledge of networking concepts, storage configurations, virtualisation technologies, and disaster recovery/backup design for hybrid environments.
- Experience with Azure DevOps (Repos, Pipelines, Boards, Artifacts) or equivalent platforms.
- Familiarity with identity and access management (IAM), including Entra ID, RBAC, PIM.
- Strong understanding of security, compliance requirements, and IT governance frameworks (ITIL, COBIT, or similar).
Preferred
- Experience with multi cloud environments or hybrid cloud integration.
- Familiarity with GitOps, policy as code (e.g. Azure Policy, OPA), and secrets management (Azure Key Vault).
- Experience implementing DevSecOps practices - automated scanning, compliance as code, and shift left security.
- Experience designing monitoring and observability frameworks (rather than just consuming them).
- Certifications- any of the following are highly valued:
- Microsoft Certified: Azure Administrator Associate (AZ-104)
- Microsoft Certified: Azure Solutions Architect Expert (AZ-305)
- Microsoft Certified: DevOps Engineer Expert (AZ-400)
- HashiCorp Certified: Terraform Associate
- ITIL Foundation or Practitioner
- CISSP or similar security certification
Benefits
- 'Enjoy the Ride' Merlin Annual Passes - 6 in total per year, 1 for you, plus 5 to gift to loved ones!
- Merlin Magic Pass - 20 free tickets for you, your family and friends to enjoy all our Merlin Attractions across the world rising to 40 after a year's service
- 33 days holiday (including bank holidays)
- Company bonus
- Private pension scheme
- 40% discount online off LEGO
- 25% discount in our on site retail shops and restaurants
- Ongoing training and development opportunities
- Plus, many more
Pay Range
Competitive