Cloud Infrastructure & Network Engineer

The Intelligent Substation programme operates across the boundary between operational technology, edge computing and Azure cloud services. Its solutions connect distributed substation environments to centrally managed cloud platforms, enabling secure data acquisition, monitoring, analytics and application services.

We are seeking a senior, hands-on Cloud Infrastructure and Network Engineer to join a small multidisciplinary team responsible for maintaining, supporting and further developing this distributed environment. The role requires deep network diagnostic capability together with practical experience of Azure hybrid infrastructure, Azure Local, Azure Arc and Kubernetes platforms.

Key Responsibilities

· Design, build, maintain and troubleshoot hybrid infrastructure connecting distributed edge locations with Azure services.

· Support Azure Local, Azure Arc-enabled servers, Arc-enabled Kubernetes and Arc-managed AKS environments.

· Configure and maintain Azure virtual networks, routing, network security controls, private endpoints, DNS and hybrid connectivity.

· Support ExpressRoute, VPN Gateway and other private connectivity patterns between operational locations, data centres and Azure.

· Analyse packet captures to diagnose application, transport, routing, firewall, name-resolution, certificate and protocol issues.

· Reproduce and test network conditions and traffic flows using tools such as Wireshark, tcpdump, tcpreplay and related Linux utilities.

· Design and maintain network segmentation, VLAN, NAT, routing and firewall policies across IT, cloud, edge and operational technology environments.

· Support Azure Firewall, Network Security Groups, Private Link and controlled outbound connectivity patterns.

· Implement and support identity, certificate and trust services used by distributed infrastructure and edge applications.

· Automate infrastructure deployment, configuration and validation using Terraform, Bash, PowerShell and other appropriate tooling.

· Establish infrastructure and network monitoring using Azure Monitor, Log Analytics, Network Watcher, Prometheus, Grafana and associated alerting.

· Investigate and resolve incidents spanning edge infrastructure, cloud services, Kubernetes, connectivity and security controls.

· Produce and maintain network diagrams, configuration documentation, operational procedures and recovery guidance.

· Work closely with software, security, architecture, data and electrical transmission domain specialists, as well as telecommunications and infrastructure partners.

Required Skills and Experience

· 10+ years’ experience in network, cloud infrastructure or hybrid-platform engineering.

· Deep practical knowledge of IP networking, subnetting, routing, VLANs, NAT, DNS, firewalls, proxies and network segmentation.

· Advanced packet-capture and protocol-analysis skills, including the ability to interpret PCAP files and diagnose issues across multiple network layers.

· Strong hands-on experience with Wireshark, tcpdump, tcpreplay or comparable network diagnostic tools.

· Significant experience designing and operating Azure networking, including Virtual Network, ExpressRoute, VPN Gateway, Azure Firewall and Private Link.

· Strong experience with Azure Local and Azure Arc in distributed or hybrid environments.

· Experience deploying or supporting Arc-enabled Kubernetes and AKS running on customer-managed infrastructure.

· Good understanding of Kubernetes networking, ingress, service discovery, load balancing, certificates and container-to-container communication.

· Experience with Entra ID, managed identities, role-based access control, certificate services and public key infrastructure.

· Strong Linux administration and Bash scripting skills, together with PowerShell experience.

· Experience implementing infrastructure as code using Terraform or an equivalent technology.

· Practical knowledge of cloud and infrastructure monitoring, logging, alerting and incident management.

· Ability to troubleshoot complex problems involving multiple suppliers, platforms, network zones and security boundaries.

The Intelligent Substation programme operates across the boundary between operational technology, edge computing and Azure cloud services. Its solutions connect distributed substation environments to centrally managed cloud platforms, enabling secure data acquisition, monitoring, analytics and application services.

We are seeking a senior, hands-on Cloud Infrastructure and Network Engineer to join a small multidisciplinary team responsible for maintaining, supporting and further developing this distributed environment. The role requires deep network diagnostic capability together with practical experience of Azure hybrid infrastructure, Azure Local, Azure Arc and Kubernetes platforms.

Key Responsibilities

· Design, build, maintain and troubleshoot hybrid infrastructure connecting distributed edge locations with Azure services.

· Support Azure Local, Azure Arc-enabled servers, Arc-enabled Kubernetes and Arc-managed AKS environments.

· Configure and maintain Azure virtual networks, routing, network security controls, private endpoints, DNS and hybrid connectivity.

· Support ExpressRoute, VPN Gateway and other private connectivity patterns between operational locations, data centres and Azure.

· Analyse packet captures to diagnose application, transport, routing, firewall, name-resolution, certificate and protocol issues.

· Reproduce and test network conditions and traffic flows using tools such as Wireshark, tcpdump, tcpreplay and related Linux utilities.

· Design and maintain network segmentation, VLAN, NAT, routing and firewall policies across IT, cloud, edge and operational technology environments.

· Support Azure Firewall, Network Security Groups, Private Link and controlled outbound connectivity patterns.

· Implement and support identity, certificate and trust services used by distributed infrastructure and edge applications.

· Automate infrastructure deployment, configuration and validation using Terraform, Bash, PowerShell and other appropriate tooling.

· Establish infrastructure and network monitoring using Azure Monitor, Log Analytics, Network Watcher, Prometheus, Grafana and associated alerting.

· Investigate and resolve incidents spanning edge infrastructure, cloud services, Kubernetes, connectivity and security controls.

· Produce and maintain network diagrams, configuration documentation, operational procedures and recovery guidance.

· Work closely with software, security, architecture, data and electrical transmission domain specialists, as well as telecommunications and infrastructure partners.

Required Skills and Experience

· 10+ years’ experience in network, cloud infrastructure or hybrid-platform engineering.

· Deep practical knowledge of IP networking, subnetting, routing, VLANs, NAT, DNS, firewalls, proxies and network segmentation.

· Advanced packet-capture and protocol-analysis skills, including the ability to interpret PCAP files and diagnose issues across multiple network layers.

· Strong hands-on experience with Wireshark, tcpdump, tcpreplay or comparable network diagnostic tools.

· Significant experience designing and operating Azure networking, including Virtual Network, ExpressRoute, VPN Gateway, Azure Firewall and Private Link.

· Strong experience with Azure Local and Azure Arc in distributed or hybrid environments.

· Experience deploying or supporting Arc-enabled Kubernetes and AKS running on customer-managed infrastructure.

· Good understanding of Kubernetes networking, ingress, service discovery, load balancing, certificates and container-to-container communication.

· Experience with Entra ID, managed identities, role-based access control, certificate services and public key infrastructure.

· Strong Linux administration and Bash scripting skills, together with PowerShell experience.

· Experience implementing infrastructure as code using Terraform or an equivalent technology.

· Practical knowledge of cloud and infrastructure monitoring, logging, alerting and incident management.

· Ability to troubleshoot complex problems involving multiple suppliers, platforms, network zones and security boundaries.

Desirable Experience

· Operational technology, industrial control or critical national infrastructure environments.

· Industrial protocols such as IEC 61850, DNP3, Modbus TCP, MQTT, AMQP or OPC UA.

· Azure IoT Hub, Azure IoT Edge, Azure IoT Operations or comparable edge platforms.

· Outbound-only connectivity models, private cloud access, proxy services and tightly controlled security zones.

· Prometheus, Grafana and automated infrastructure or network health monitoring.

· High-availability, disaster-recovery and distributed fleet-management solutions.

Preferred Certifications

· Microsoft Certified: Azure Network Engineer Associate.

· Microsoft Certified: Azure Solutions Architect Expert.

· Cisco CCNP Enterprise, CCNP Security or equivalent.

· Relevant Azure Hybrid, Kubernetes or security certification.

The successful candidate will combine strong network engineering fundamentals with the cloud, automation and diagnostic skills needed to operate distributed infrastructure in a secure and highly controlled environment.

· Operational technology, industrial control or critical national infrastructure environments.

· Industrial protocols such as IEC 61850, DNP3, Modbus TCP, MQTT, AMQP or OPC UA.

· Azure IoT Hub, Azure IoT Edge, Azure IoT Operations or comparable edge platforms.

· Outbound-only connectivity models, private cloud access, proxy services and tightly controlled security zones.

· Prometheus, Grafana and automated infrastructure or network health monitoring.

· High-availability, disaster-recovery and distributed fleet-management solutions.