Cloud Engineer

Role & responsibilities

Microsoft Azure

• Manage Azure VMs, VNets, NSGs, and Storage Accounts in the Azure portal and via Azure CLI/PowerShell.
• Administer Entra ID (Azure AD) user accounts, groups, and basic RBAC role assignments.
• Configure MFA, Conditional Access policies, and Intune device compliance profiles.
• Monitor resources using Azure Monitor and respond to basic alerts; escalate critical issues to L3.
• Support Azure Backup and assist with Azure Site Recovery (ASR) configurations.
• Assist with Azure subscription tasks such as resource group management and cost tag enforcement.

Amazon Web Services (AWS)

• Administer EC2 instances, S3 buckets, IAM users/roles, and VPC configurations.
• Manage security groups and basic NACLs following least-privilege access principles.
• Monitor resources via CloudWatch; respond to alerts and escalate as needed.
• Assist with routine AWS housekeeping – unused resource cleanup, tagging, and snapshot management.
• Troubleshoot common connectivity issues across VPN and VPC peering connections.

VMware vSphere / ESXi

• Provision and manage virtual machines – cloning, snapshots, and resource configuration in vCenter.
• Perform basic ESXi host monitoring – CPU, memory, datastore utilisation, and alert triage.
• Handle VM disk operations – VMDK expansion and Windows volume extension.
• Support VCSA administration – basic tasks such as password management and VAMI access.
• Assist with Veeam backup operations – verifying backup jobs and performing file-level restores.
• Configure basic vSphere networking – port group assignments and VLAN tagging on Standard vSwitches.

Windows Server & Active Directory

• Administer Windows Server 2019/2022 – roles, features, patching, and event log monitoring.
• Manage AD user accounts, groups, OUs, and apply Group Policy Objects as directed.
• Support file server and print server operations including share permissions and driver management.
• Assist with Hybrid Azure AD Join troubleshooting and Azure AD Connect sync issue resolution.

Security & Compliance

• Apply security baselines and assist with ISO 27001 / CIS Benchmark compliance checks.
• Manage endpoint protection via Sophos Central – policy application and alert response.
• Assist with patch management cycles for servers and VMs within defined SLA windows.
• Maintain accurate documentation for assigned assets, changes, and incidents in the ITSM tool.

Azure DevOps

• Basic familiarity with Azure DevOps – navigating projects, repos, and pipeline statuses.
• Ability to trigger or monitor existing CI/CD pipeline runs and report failures.
• Experience with Azure DevOps Server (on-premises) administration is a plus