Cloud Security Engineer

Right across infrastructure, there’s a requirement to not only maintain, but also renew and reimagine. Whatever stage you’re at in your career, with us you’ll have an opportunity to grow and develop. Delivering essential infrastructure services for life, while being safety first, and client and customer centric in a friendly, fun and respectful environment where you are encouraged to thrive. Where will you be working? You’ll be joining Cyro Cyber, part of MGroup, a specialist cyber security consultancy founded in 2021 to help public sector and financial organisations protect their Critical Digital Infrastructure. While Cyro Cyber has grown in size, reach and expertise, its core purpose remains the same: delivering trusted, independent cyber security advice and services to keep clients safe in an ever-evolving threat landscape. Cyro Cyber operates across the UK, with offices in London and Farnborough, working on high-impact, mission-critical projects that really matter. Want to come and be a part of it? What will you be doing? As a Cloud Security Engineer, you'll help design, implement and strengthen security across Azure and Microsoft 365 environments, supporting critical infrastructure and transformation projects within the NRTS programme. Working closely with Security Architects, you'll turn security requirements into practical, secure solutions, leading the engineering delivery of cloud security controls across identity, privileged access, governance, networking, monitoring and data protection. You'll also leverage automation and Infrastructure as Code to deliver scalable, secure-by-design solutions, while ensuring platforms remain compliant, resilient and operationally effective. Alongside hands-on technical delivery, you'll collaborate with clients, engineers and stakeholders, provide security assurance and contribute to the ongoing development of innovative cloud security services and best practices. Key areas of responsibility include: - Implementing and improving Azure and Microsoft 365 security controls. - Securing cloud identities, privileged access, networks, workloads and data. - Developing automated, repeatable security solutions using Infrastructure as Code. - Producing technical designs, documentation and operational standards. - Conducting security reviews, hardening activities and technical assurance. - Supporting clients and project teams with expert cloud security guidance. This is a hands-on role for a cloud security professional who enjoys solving complex challenges while working across the full Microsoft security ecosystem. What you’ll bring: - Strong hands-on experience engineering and securing Microsoft Azure environments. - Practical capability across several Azure security domains, including identity, governance, networking, workload protection, logging and secrets management. - Experience with Microsoft Entra ID, including practical exposure to Privileged Identity Management, together with experience across a selection of Azure security technologies such as Azure Policy, Defender for Cloud, Key Vault, Azure Monitor and Log Analytics. - Experience using infrastructure-as-code or scripting tools such as Bicep, Terraform, PowerShell or Azure CLI. - Ability to interpret architectural requirements and translate HLDs into accurate LLDs, build documentation, test plans and operational runbooks. - Strong troubleshooting skills and experience resolving cloud configuration, access, policy and integration issues. - Understanding of cloud security principles including least privilege, defence in depth, secure-by-design, segmentation, encryption and continuous monitoring. - Good client-facing communication, documentation and stakeholder engagement skills. - Ability to work autonomously under general direction, lead defined work packages and guide colleagues where appropriate. - Eligibility for UK Security Clearance (successful appointment will be subject to being granted Security Clearance). - Willingness to work across a varied portfolio of cloud security engineering activities, applying existing strengths while developing capability in other areas. What’s in it for you? We offer a range of benefits designed to support your life in and out of work, some of which include; - Matched or contributory pension scheme - Online GP service, 24 hours a day, 365 days a year - Employee assistance programme - My Rewards portal, access to 1000’s of retail discounts - Life assurance - Enhanced maternity, paternity leave and adoption leave - Reward and recognition scheme In addition, this role offers; - My Car Choice our salary sacrifice EV/ Hybrid car scheme - Private health care and health care cash plan for you - Discretionary bonus schemes - 26 days annual leave plus bank holidays - Recommend a friend - get rewarded for introducing people to us! About Us We want to be an employer of choice and a great place to work, attracting diverse and talented people, who join us and make a difference. We’re one of the Top 100 UK companies actively supporting and recruiting veterans. Our ENABLE inclusion networks bring together people who have a shared passion, to help create an environment where everyone belongs. Our values help to shape our culture and how we work with one another. We recruit with these values in mind, to ensure your aspirations, and ways of working, align with ours. - We’re responsible and go further for our people, clients, communities and the planet - We’re open and seek new and better ways of exceeding expectations - We’re together and as one team; the whole is greater than the sum of the parts - We’re ambitious and embrace opportunity, to lead essential infrastructure services for life Whether you’re a trainee, apprentice or graduate, or progressing through your career, our people benefit from industry recognised programmes, training and development. It’s an exceptional time to be a part of Cyro Cyber, a part of M Group. Please note: Occasionally, job adverts might be closed before the stated closing date. Do apply as soon as possible to ensure your application is considered. For certain roles, successful candidates will be subject to 3rd party background checks as part of the hiring process. Some roles require drug and alcohol testing as part of induction and onboarding. #MGroupG IND2