Cloud Engineer

For a quarter of a century, the Jellycat family have brought joy, wonder and playful fun to people of all ages, in every part of the world. Utterly original and in a class of their own, they are currently among the most loved and collected toys of their kind. How has this gentle tribe endeared themselves to so many? Perhaps it is their whimsical expressions. Or the deliciously soft fabrics. Or the beautiful way in which they sit in your hand. Whatever it is, there is something magical and unmistakeable about each one of them.

We're looking for an experienced Cloud Engineer who thrives in a hands-on environment and enjoys solving complex infrastructure challenges. Joining our global IT team, you'll play a key role in shaping and supporting our cloud ecosystem, partnering closely with Infrastructure and IT leaders to deliver secure, scalable solutions that support Jellycat's growth around the world. With a security-first mindset and a pragmatic approach, you'll have the opportunity to work on impactful projects across multiple regions and technologies.

You'll be;

• Configuring, maintaining and supporting the Azure estate, including Microsoft Azure cloud services, servers and storage, cloud networking, DNS and email security systems. Administering Entra ID, including Conditional Access, Privileged Identity Management and hybrid identity components.
• Designing, deploying and managing cloud-based infrastructure and services utilising infrastructure-as-code, adhering to Azure Policy where configured.
• Applying security-first principles in proportion to Jellycat's risk. Ensuring adherence to IT security standards and policies, including patch management, MFA, least-privilege access and Zero Trust network access, protecting systems without getting in the way of how people work.
• Monitoring platform health and performance in Azure Monitor, tuning alerting and acting on issues before users report them. Leading the resolution of infrastructure incidents and major outages, working through Halo ITSM and following the change process. Providing third-line escalation support to the IT Service team where required.
• Carrying out routine vulnerability assessments and coordinating remediation through to closure.
• Maintaining clear and up-to-date documentation of cloud infrastructure components, configurations, processes and changes to support transparency and future scalability.

You'll have;

Technical Skills & Experience

• A security-first mindset, with experience implementing least-privilege principles, Zero Trust architecture and security best practices appropriate to business risk.
• Strong experience with Microsoft security technologies, including the Defender suite, Purview, PIM, Sentinel and Intune.
• Experience administering Windows Server environments within cloud-hosted virtual infrastructures, including Active Directory, DNS and Group Policy.
• Strong hands-on experience with Microsoft Azure IaaS and PaaS services, including networking, identity and access management, backup and monitoring.
• Strong troubleshooting skills, with the ability to research and resolve problems independently.
• An understanding of Azure Landing Zone principles and best practices.
• Experience scripting and automating tasks using PowerShell and Azure CLI.

Experience & Qualifications

• 2-3 years' experience in a hands-on Azure Engineering or Managed Service Provider (MSP) role, supporting multiple sites or customers.
• Microsoft certifications, with AZ-104 expected and AZ-500, AZ-305, SC-300 or Terraform Associate considered advantageous.
• Exposure to security and compliance frameworks such as Cyber Essentials Plus, CIS and PCI DSS.

Key Measures For Success

• A collaborative approach, building strong relationships across global and local IT teams while contributing to a high-performing environment.
• A strong sense of ownership and accountability, with the ability to manage tasks and projects through their full lifecycle with minimal supervision.
• Strong analytical, troubleshooting and decision-making skills, with the ability to resolve issues effectively and elevate when appropriate.
• A commitment to continuous learning and professional development, proactively identifying opportunities to expand knowledge and capability.
• A track record of creating and maintaining clear, accurate documentation that supports knowledge sharing and operational continuity.
• The flexibility and reliability to deliver against agreed deadlines, including the ability to travel between sites and support critical infrastructure activities outside standard working hours when required.