Ordnance Survey Logo

Ordnance Survey

Cloud Infrastructure Engineer

Posted Yesterday
Be an Early Applicant
In-Office
Southampton, Hampshire, England
Mid level
In-Office
Southampton, Hampshire, England
Mid level
Design, build, and operate secure, compliant Azure Landing Zones and reusable infrastructure patterns. Implement Infrastructure as Code (Bicep/Terraform), automate deployments via Azure DevOps CI/CD, manage networking, governance, identity, and security controls, onboard workloads, harden VMs, and maintain image-building tooling to improve platform reliability and compliance.
The summary above was generated by AI

Cloud Infrastructure Engineer  

Fulltime | £43,918.00 - £51,238.00  (dependent on experience) 

OSHQ - Southampton Hybrid 

 

About OS 

 

Join us in building the cloud platform that powers the geospatial data used across government, business, and everyday life. 

 

Ordnance Survey is the national mapping agency for Great Britain, delivering worldclass geospatial data and services that underpin innovation and decision making across government, business, and everyday life. Our engineering teams build and operate the cloud platforms and tools that enable OS to deliver accurate, reliable data at scale — helping millions of people and organisations every day. 

 

We’re passionate about using modern technology to make a meaningful impact, and we’re looking for engineers who share that enthusiasm. 

 

 

Our Principles  

 

At OS, how we work matters just as much as what we deliver. Throughout our hiring process we will assess competence assessing alignment in how you:  

 

  • Clear the path – Cut the noise, simplify and remove blockers so work can move at pace  

  • Seek the story – Listen fully, build understanding, factcheck assumptions and speak up  

  • Do what matters – Focus on value, make deliberate stop/start/continue decisions, and recognise the contribution of others  

 

 

About the role 

 

We are looking for a skilled Cloud Infrastructure Engineer to play a key role in designing and implementing Azure Landing Zones (ALZ) within a modern, enterprise-scale environment. 

 

This is an exciting opportunity to help shape a secure, scalable, and compliant cloud platform, enabling teams to deliver services confidently and efficiently in Azure. 

 

You will work across engineering, security, and platform teams to build reusable infrastructure patterns, automate deployments, and embed good practices aligned with Microsoft’s Cloud Adoption Framework. 

 

 

Important:  

 

Please note that due to the nature of this work - this role is conditional on holding or subsequently passing National Security Vetting SC Clearance prior to appointment. 

 

 Key Responsibilities 

 

  • Develop and maintain Infrastructure as Code (IaC) using Bicep and Terraform 

  • Automate platform deployments via CI/CD pipelines (Azure DevOps)  

  • Configure and manage management groups, subscriptions, and governance controls  

  • Maintain networking components including hub-and-spoke, Azure Firewall, and private connectivity  

  • Embed security and compliance controls (e.g., RBAC, PIM, policies, Defender for Cloud)  

  • Collaborate with security, operations, and application teams to onboard workloads  

  • Troubleshoot platform issues and continuously improve reliability, governance and security 

  • Management and security hardening of Virtual Machines using Desired State Configuration 

  • Maintenance of centralised tooling to build Virtual Machine images using Image Builder / Packer. 

  

 

Required Skills & Experience 

 

  • Experience using Microsoft Azure  

  • Knowledge of:  Azure networking (vNets, DNS, Firewall, Private Endpoints)  

  • Identity & access management (Entra ID, RBAC, PIM)  

  • Governance (Azure Policy, Defender for Cloud, cost management)  

  • Experience with Infrastructure as Code (Bicep or Terraform)  

  • Familiarity with CI/CD pipelines and DevOps practices  

  • Solid troubleshooting and problem-solving skills  

  • Ability to write user friendly documentation for an engineering audience 

 

 

Desirable 

 

  • Hands-on experience with Azure Landing Zones or enterprise-scale cloud environments  

  • Experience with Azure Landing Zone Accelerator or CAF implementation  

  • Knowledge of security frameworks (NCSC guidance, CIS benchmarks, ISO 27001)  

  • Scripting skills (PowerShell, Azure CLI, or Python)  

  • Understanding of DNS, hybrid connectivity, or enterprise networking  

  • Azure certifications (e.g., AZ-104, AZ-305, AZ-500, AZ-700) 

  • Experience of Windows and Linux provisioning and security hardening. 

 

 

Whats important to us 

 

  • Competent use of source control and editors/IDEs 

  • Good grasp of cloud computing principles 

  • Passion for mentoring and sharing knowledge with others 

  • Enthusiasm for learning new skills and staying up to date. 

  • Thriving in an agile, collaborative environment 

 

 

Find out more: 

 

If you’d like to learn more about the role and the people with whom you’d be working, we are hosting two open sessions on Teams: 

 

Session 1: Friday 26 June - 12:30-13:10 

 

https://teams.microsoft.com/meet/34952066454389?p=hG6oYc69BZje6pnRX4 

 

 

Session 2: Wednesday  1 July 17:30-18:10 

 

https://teams.microsoft.com/meet/353338842961301?p=Q6nt2vu9zmkyQDQ0rM 

 

These sessions are informal, completely optional, drop in when you can, and do not form part of the interview process. They are an opportunity to learn more and to ask questions. If you can’t make the whole session, feel free to join when you can. The sessions will not be recorded. 

  

  

The Rewards 

 

We want you to love what you do and feel supported to do your best work. 

 

Our benefits include: 

 

  • Competitive salary and pension (OS contribute up to 12.07%)

  • Performancerelated bonus (where applicable) 

  • 28 days annual leave plus bank holidays (increasing with service) 

  • Enhanced family leave, including paid partner leave 

  • Hybrid and flexible working options 

  • Learning and development support, coaching and mentoring 

  • Free subscription to OS Maps and access to wellbeing support 

  • Volunteering leave and matched fundraising 

  

 

Location: 

 

We have a fantastic HQ in Southampton, and OS promotes Hybrid Working where you will be required to spend 50% of your working hours in person at HQ.    

 

 

Interview Process 

  • Stage 1 - Microsoft Teams Introduction (approx. 15mins) w/c 20th July 2026

  • Stage 2 – Competency based Interview (in person at OSHQ) w/c 27th July 2026

 

 

Security 

 

Please be advised that this role will require additional security vetting.  

 

OS conducts pre-employment checks for anyone made an offer of employment, including identity, right to work, employment history and criminal record checks (via Disclosure & Barring Services (DBS).  

 

 

Closing date: Sunday 12th July 2026 at 23:59pm 

   

 

Inclusion at OS 

 

Research indicates that women, individuals with disabilities, LGBTQ+ community members, neurodiverse individuals, and people from ethnic minority backgrounds often hesitate to apply for jobs unless they meet every single qualification. At Ordnance Survey, we are dedicated to fostering a diverse, inclusive, and genuine workplace where everyone can thrive.  

 

If you’re enthusiastic about this role but your experience doesn’t perfectly match every qualification in the job description, we encourage you to apply anyway. You might be the ideal candidate for this or other roles within Ordnance Survey.   

 

We are happy to consider any reasonable adjustments that people may need during the recruitment process, and you will be asked whether you require any during the application process.    

 

 

Skills required for this role:

Computer Coding, Computer Programming, Delivery Methodologies, Software Components, Software Development, Software Engineering, Troubleshooting

Similar Jobs

Senior level
Artificial Intelligence • Information Technology • Software • Consulting
Design, deploy, and operate enterprise OCI landing zones, networking, compute, storage, and database services. Implement IaC with Terraform, CI/CD pipelines, observability, security controls, cost optimization, disaster recovery, and automation (Python/Bash). Partner with DBAs, app and security teams, mentor junior engineers, and support workload migrations and ongoing platform operations.
Top Skills: Autonomous DatabaseBashData SafeDrgExadata CloudFastconnectGitGithub ActionsIpsec VpnJenkinsKubernetesMysql HeatwaveOci ApmOci Cloud GuardOci DevopsOci Identity DomainsOci LoggingOci MonitoringOci Resource ManagerOci VaultOkeOracle Cloud Infrastructure (Oci)PythonSecurity ZonesTerraformVcn
2 Days Ago
In-Office
Senior level
Senior level
Fintech • Software • Financial Services
Design, build and operate multi-tenant GKE Kubernetes platforms on GCP. Deliver automation-first infrastructure with Terraform, CI/CD and GitOps; apply SRE practices for observability, incident response and reliability; implement policy-as-code and platform security; support networking, service mesh and shared platform services; contribute to on-call rotation and platform onboarding.
Top Skills: AnthosAnthos Config Management/Config SyncBackstageBashCert-ManagerCi/CdCloudabilityCorednsDnsDynatraceGitopsGkeGoGoogle Cloud Platform (Gcp)InfobloxIstioKubernetesNatOpa GatekeeperPythonRbacService MeshTerraformVpcVpnWorkload Identity
3 Days Ago
In-Office
London, Greater London, England, GBR
Mid level
Mid level
Edtech
Ensure availability, reliability and scalability of AWS-based services. Manage IaC, CI/CD for containerised and serverless apps, monitor with Prometheus/Grafana/CloudWatch, respond to incidents, drive cost optimisation and platform improvements.
Top Skills: Amazon EcsAurora MysqlAWSAws CloudwatchAws LambdaAws Security HubCi/CdCloudflareCloudFormationDockerDynamoDBGithub ActionsGrafanaLinuxPrometheusShell ScriptingTerraformVpc

What you need to know about the London Tech Scene

London isn't just a hub for established businesses; it's also a nursery for innovation. Boasting one of the most recognized fintech ecosystems in Europe, attracting billions in investments each year, London's success has made it a go-to destination for startups looking to make their mark. Top U.K. companies like Hoptin, Moneybox and Marshmallow have already made the city their base — yet fintech is just the beginning. From healthtech to renewable energy to cybersecurity and beyond, the city's startups are breaking new ground across a range of industries.

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account