Job summary
We have an opportunity for a Senior Cloud Engineer to join our growing organisation. You'll play a fundamental role by ensuring our cloud infrastructure is effective and continually improving, ensuring Ofwat's people have the right capabilities and tools to deliver for customers, society, and the environment.�
You will collaborate closely with our developers, DevOps team, and IT professionals to design, deploy, and manage infrastructure that supports business operations. Additionally, as a Principal within Ofwat, you will form part of our wider leadership team and will take responsibility for cracking some of our toughest problems.�
This opportunity will suit somebody with expertise in Microsoft Azure, including Azure Blob Storage, Entra (Azure Active Directory), on-premises Active Directory, Intune, Autopilot, Virtual Desktop Infrastructure (VDI), Microsoft Server, Linux Red Hat, and advanced networking knowledge. This role involves working in both cloud environments and limited on-premises infrastructure, including VMware and HP ProLiant servers.�
You can find out more about Ofwat, why you should join us, our strategy, values and our framework for success in the attached Information for Candidates Pack.
Job description
In this role you will be expected to cover the following areas:
Cloud Infrastructure Management:
1. Design, implement, and maintain cloud environments using Microsoft Azure, ensuring scalability, security, and reliability.
2. Deploy and manage Azure Blob Storage�for secure, scalable, and cost-efficient data storage solutions.
3. Set up and manage Entra (Azure Active Directory)�for identity management, ensuring seamless integration with on-premises Active Directory.
4. Implement and manage Microsoft Intune�and Autopilot�to support device management, deployment, and configuration across cloud and hybrid environments.
5. Deploy and manage Virtual Desktop Infrastructure (VDI)�on Azure to support remote users.
6. Collaborate with DevOps and development teams to optimise cloud-based environments for automation and software deployment.
On-Premises Infrastructure:
7. Manage and maintain on-premises Active Directory�and hybrid identity solutions.
8. Oversee on-premises systems, including VMware virtualised environments�and HP ProLiant servers.
9. Ensure high availability, performance, and security of both cloud and on-premises infrastructure.
10. Implement and maintain backup solutions, disaster recovery strategies, and monitoring systems.
Server Administration:
11. Install, configure, and troubleshoot Microsoft Servers�(2016, 2019, 2022).
12. Maintain and manage Linux Red Hat�servers, including patching, security hardening, and performance optimisation.
Networking:
13. Design and manage on-premises networking infrastructure, including routing, switching, firewalls, and VPNs.
14. Provide advanced troubleshooting for network-related issues and ensure seamless integration between on-premises and cloud environments.
15. Collaborate with network engineers to ensure optimised connectivity, security, and performance between hybrid cloud and on-premises systems.
Collaboration with Development & DevOps Teams:
16. Work closely with developers and DevOps teams to support CI/CD pipelines, automation, and infrastructure-as-code (IaC) deployments.
17. Assist in troubleshooting and optimising applications in both cloud and hybrid environments.
Security & Compliance:
18. Ensure all systems adhere to organisational security and compliance standards, including identity management via Entra�and on-premises Active Directory.
19. Implement security measures such as access controls, encryption, and vulnerability management across cloud, on-premises, and hybrid environments.
Person specification
To be successful in this role you will need the below essential experience, skills, knowledge and attributes:
Experience, skills and knowledge�
20. Lead criterion: 5+ years of experience�in a Cloud Engineer, Systems Administrator, or similar role.
21. Lead criterion: Expertise in Microsoft Azure�cloud infrastructure, including Azure Blob Storage, Entra (Azure Active Directory), and VDI.
22. Strong experience managing on-premises Active Directory�environments.
23. Proficiency with Microsoft Intune�and Autopilot�for device management and deployment.
24. Strong hands-on experience with Microsoft Windows Server�(2016/2019/2022) environments.
25. Experience with Linux Red Hat�server administration.
26. Networking knowledge, including experience with VLANs, firewalls, VPNs, and hybrid cloud networking.
27. Proven experience with on-premises infrastructure, including VMware�and HP ProLiant servers.
28. Experience working in an Agile environment�and collaborating with DevOps teams�on CI/CD pipelines and automation.
29. Understanding of virtualisation�technologies, including VMs, containers, and Kubernetes.
Attributes�
30. Champion and leader of change
31. Builds Trust
32. Delivers outcomes
Attributes as per Ofwat�s Framework for Success for Principal Grade. You can read more about our attributes .
**We are also hiring for a junior-to-mid level Cloud Engineer. Candidates who don't meet the criteria for this senior role may be interested in applying for that vacancy instead. See the vacancy on Civil Service Jobs.**�
Benefits
Why You Should Join Us:�
We�re forward-thinking, creative, innovative, and ambitious. We constantly push the boundaries and embrace new ways of working.��
With us, your work matters, your voice is heard, and your impact is felt. Ours is a culture of trust, flexibility, autonomy, collaboration, and innovation. We all want positive change for water customers, the environment, and the future of water.��
But for us, change is more than what happens on the outside � we�ve always pushed boundaries internally, too. From becoming the first Civil Service organisation to achieve �Smarter Working� status, to gaining our prestigious �Smarter Working Maturity� award, we�ve consistently demonstrated our commitment to embracing innovative ways of working. Our people do their best work when given freedom over where, when, and how they work. Which is why we trust our teams to balance meaningful collaboration in the office with the flexibility of working from home.�
You will also benefit from:
33. Excellent employer pension contributions of (around �15,900 to �17,300 per annum for this role). You can find further details about pension schemes under Terms and Conditions in the Candidate Pack.
34. days leave (25 days annual leave + days privilege leave) increasing to max days with each year of service, plus bank holidays
35. Access to exclusive discounts on a variety of goods and services, including retail�
outlets, theatre tickets, holidays, insurance, and a gym membership.
36. Flexible working arrangements that suit your lifestyle.
37. Fees paid for membership of relevant professional bodies.
38. Up to 3 volunteering days per year.
39. Generous shared parental leave and pay.
40. Enhanced sick pay.
41. Regular development opportunities.
42. Health and wellbeing initiatives.
43. Season ticket loan for home-to-office travel.
44. Cycle-to-work scheme.