Azure Cloud Engineer
About the company As product compliance and ESG regulations continue to expand worldwide, and consumers increasingly demand sustainable, eco-friendly products, companies struggle to collect, validate, and report supply chain data to meet due diligence and compliance obligations – particularly when sourcing materials and commodities from around the world. Source Intelligence is the culmination of five trailblazers in ESG and compliance solution development who combined their expertise and technology to deliver the most comprehensive solution on the market. We empower our clients to identify and eliminate environmental hazards and human rights abuses in their supply chains through unmatched innovation, reliability, and expertise. Our industry-leading solutions – from SaaS software to fully managed services – are designed to meet each client’s unique needs and evolve alongside them throughout their compliance journey. By partnering with Source Intelligence, companies gain deeper insight into their supply chain, enabling them to make better sourcing, design, and packaging decisions for the benefit of people and the planet. About the role The Azure Cloud Engineer within the Cloud Operations Team at Source Intelligence is responsible for managing and securing Source Intelligence’s Azure and Microsoft 365 environments, supporting cloud infrastructure, identity management, security compliance, customer platform provisioning, and day-to-day IT operations. Working closely with cross-functional teams, the role ensures reliable, secure, and scalable cloud services for both internal users and customer-facing platforms. What you’ll do Cloud Infrastructure & Platform Management Design, deploy, and manage Azure infrastructure: VNets/Private Endpoints, NSGs, WAF, Front Door, CDN, APIM, Azure Firewalls, VMs, App Services, Storage Accounts, and database platforms (Azure SQL, SQL MI). Monitor system health and devise/implement monitoring solutions using Azure Monitor and Log Analytics; respond to alerts and investigate performance incidents. Provision customer environments: stand up multi-tenant CMAP instances, provision ChainPoint instances, clone test/UAT/production environments, and manage SFTP/file transfer integrations Troubleshoot and resolve issues across cloud and on-premises environments. Identity, Security & Governance Administer Entra ID (Azure AD): customer SSO integrations (SAML/OIDC), conditional access, RBAC, and MFA enforcement. Manage Intune device policies, Autopilot enrolment, BitLocker encryption, and VPN configuration (Azure VPN). Own security compliance: Vanta remediation, ISO 27001/SOC 2 evidence collection, Qualys scanning, security questionnaires, and penetration test coordination. Apply governance controls using Azure Policy, resource locks, tagging strategies, and management groups. Microsoft 365 & IT Operations Provision and deprovision of user accounts across SaaS tools, Azure, and Source Intelligence Platforms. Administer Exchange Online: mailboxes, distribution lists, mail flow rules, DKIM/SPF, SendGrid, and phishing response. Manage employee lifecycle IT: onboarding, offboarding, laptop provisioning, account setup, and equipment replacement. Administer M365 licenses, SaaS subscriptions, SSL/TLS certificates, DNS records, and domain changes. Collaboration Collaborate with Platform Engineering, Delivery, and Data Engineering teams. What we’re looking for Cloud (Azure) Virtual Machines, App Services, Functions, and Storage Accounts. Azure SQL Database, Azure SQL Managed Instance, and SQL Server on Azure VMs. Networking: VNets/Private Endpoints, NSGs, Load Balancers, Application Gateway, Front Door, NAT Gateway, and WAF. Entra ID (Azure AD), RBAC, IAM, conditional access, and SSO/SAML integration. Azure Policy, governance, resource locks, and management groups. Azure Monitor, Log Analytics, and alert configuration. Intune endpoint management, Autopilot, and device compliance. Security & Compliance Vanta remediation, ISO27001/SOC 2 evidence collection, and Qualys vulnerability scanning. Security questionnaire responses and penetration test coordination. Awareness of Azure cloud security best practices. Email, Licensing & SaaS Administration Exchange Online: mailboxes, distribution lists, mail flow rules, DKIM/SPF, and SendGrid. M365 licensing, SSL/TLS certificate management, and DNS administration. SaaS tools: Jira, Zendesk, Monday.com, Clockify, Teams, and SharePoint. Scripting & Automation PowerShell, Bash, and/or Python for operational automation. Azure Automation Accounts and Runbooks. Remote Support for On-Premises Infrastructure (Desirable) Windows/Linux servers, VMware or Hyper-V. Active Directory, DNS, DHCP, and Group Policy. Networking fundamentals, storage, and backup systems. Remote Support for Hybrid Infrastructure & On-Premises Migration (Desirable) Azure AD Connect, Azure Arc, Azure Migrate, and Site Recovery. Additional skills and experience Microsoft Certified: Azure Administrator Associate. Microsoft Certified: Azure Solutions Architect Expert. Problem-solving and troubleshooting under pressure. Clear communication across technical and non-technical teams. Adaptability and willingness to own a broad operational scope. Disaster recovery and business continuity planning. Cost optimisation and cloud spend governance. Salary: £45,000 - £55,000 30 days holidays Work remotely Pension Flexible working schedule Based in UK