Ordnance Survey
Cloud Infrastructure Engineer
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Cloud Infrastructure Engineer (Azure Landing Zones) – Hybrid
Location: Southampton Salary: £43,918.00 - £41,238.00 (dependent on experience) Contract Type: Full-time Work Pattern: Hybrid (50% on-site at OSHQ)
About OS
Ordnance Survey (OS) is the UK’s national mapping agency, providing world-class geospatial data and services that power critical decision-making for government, business, and everyday life.
Our engineering teams build and operate the cloud platforms underpinning OS’s mission—ensuring accuracy, reliability, and scale for millions of users daily.
We are passionate about using modern technology to create meaningful impact, and we seek engineers who share this vision.
Our Principles
During hiring and daily work, we assess alignment with how you:
- Clear the path – Remove blockers, simplify complexity, and accelerate progress.
- Seek the story – Actively listen, challenge assumptions, and verify facts.
- Do what matters – Focus on value, make deliberate decisions, and recognise team contributions.
About the Role
We are hiring a Cloud Infrastructure Engineer to design and implement Azure Landing Zones (ALZ) within a modern, enterprise-scaled cloud environment.
Why the Role is Important
This is a critical opportunity to shape a secure, scalable, and compliant cloud platform, enabling OS teams to deploy cloud services efficiently and confidently.
You will collaborate with engineering, security, and platform teams to:
- Build reusable infrastructure patterns using Microsoft’s Cloud Adoption Framework (CAF) and IAZ (Infrastructure as a Service) best practices.
- Automate deployments and embed strong governance through Bicep/Terraform/CI/CD.
- Ensure compliance, security, and operational resilience across the Azure estate.
⚠️ Important Security Note: This role is conditional on holding (or passing) SC Security Clearance prior to joining.
Key Responsibilities
Technical Delivery
- Develop and maintain Infrastructure as Code (IaC) using Bicep and Terraform.
- Automate platform deployments via CI/CD pipelines (Azure DevOps).
- Manage Azure governance (management groups, subscriptions, role-based access control).
- Configure and maintain networking models (hub-and-spoke, Azure Firewall, private endpoints).
- Embed security and compliance controls (RBAC, Just-In-Time (PIM), Defender for Cloud, policy enforcement).
- Collaborate with security, ops, and dev teams to safely onboard new workloads.
- Troubleshoot platform issues and continuously improve reliability, governance, and security.
- Hardening Windows/Linux virtual machines using Desired State Configuration.
- Maintain centralised tooling (e.g., Image Builder, Packer) to build repeatable VM templates.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Required Skills & Experience
Core Requirements
- Proven experience working with Microsoft Azure.
- In-depth knowledge of:
- Azure networking (VNets, DNS, Firewall, Private Endpoints).
- Identity & access management (Entra ID, RBAC, PIM).
- Governance (Azure Policy, Defender for Cloud, CAPEX/OPEX best practices).
- Infrastructure as Code (IaC) with hands-on experience in Bicep or Terraform.
- Familiarity with CI/CD pipelines and modern DevOps tools/AZ DevOps.
- Strong troubleshooting, debugging, and problem-solving mentality.
- Ability to create clear, user-friendly documentation for development teams.
Desirable (Bonus)
- Hands-on experience with Azure Landing Zones or CAF, including the Accelerator tool.
- Security frameworks (e.g., NCSC guidance, CIS benchmarks, ISO 27001 compliance).
- Scripting proficiency in PowerShell, Azure CLI, or Python.
- Hybrid connectivity expertise (DNS, site-to-site VPN, ExpressRoute).
- Linux/Windows provisioning & hardening experience.
- Azure certifications (e.g., AZ-104, AZ-305, AZ-500, AZ-700).
What’s Important to Us
- Strong use of version control (Git), IDEs/code editors.
- Deep understanding of cloud computing principles.
- Commitment to mentoring, coaching, and sharing knowledge with colleagues.
- Enthusiasm for continuous learning – staying updated with emerging tech.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Our Benefits
Fitness for Work & Career Growth
-
Hybrid working with 50% on-site attendance at OS HQ, Southampton.
-
28 days paid holiday + bank holidays (increasing with tenure).
-
Rich pensions (staff contribution: max 8%, OS contributes 12%) + performance-based bonuses.
-
Enhanced parental leave policies + paid partner leave.
-
Unlimited professional development (training budgets, coaching, mentoring).
Wellbeing & Support
- Free OS Maps subscription + wellbeing support (resource portal + voluntary counselling).
- Volunteer days + matched fundraising/CSR incentives.
Application Process
Closed Date & Time: Sunday 12 July 2026, at 23:59.
Selection Stages
- Stage 1 (Introductory Check-In) – Microsoft Teams call (scheduling begins w/c 20 July 2026).
- Stage 2 – Competency behavioural interview at OSHQ (Southampton, w/c 27 July 2026).
Open Q&A Sessions
We host optional virtual info-sessions to discuss the role informally.
-
Session 1: Friday 26 June | 12:30 – 13:10 BST (Teams link)
-
Session 2: Wednesday 1 July | 17:30 – 18:10 BST (Teams link)
NOTE: No recording. Attendance is flexible.
Security Vetting
SC clearance is required for this role. We run pre-employment DBS checks.
Why Work at OS?
We actively champion a culture where diversity and inclusion drive innovation.
- If your experience doesn’t match every checkboxed criterion, apply anyway—you might be perfect for us.
- We’re happy to accommodate reasonable adjustments during recruitment.
Come join us—help build the next generation of cloud infrastructure for UK mapping and critical decision-making. 🚀
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills