Senior Cloud Engineer

We have an opportunity for a Senior Cloud Engineer to join our growing organisation. You'll play a fundamental role by ensuring our cloud infrastructure is effective and continually improving, ensuring Ofwat's people have the right capabilities and tools to deliver for customers, society, and the environment.
You will collaborate closely with our developers, DevOps team, and IT professionals to design, deploy, and manage infrastructure that supports business operations. Additionally, as a Principal within Ofwat, you will form part of our wider leadership team and will take responsibility for cracking some of our toughest problems.
This opportunity will suit somebody with expertise in Microsoft Azure, including Azure Blob Storage, Entra (Azure Active Directory), on-premises Active Directory, Intune, Autopilot, Virtual Desktop Infrastructure (VDI), Microsoft Server, Linux Red Hat, and advanced networking knowledge. This role involves working in both cloud environments and limited on-premises infrastructure, including VMware and HP ProLiant servers.
You can find out more about Ofwat, why you should join us, our strategy, values and our framework for success in the attached Information for Candidates Pack., In this role you will be expected to cover the following areas:
Cloud Infrastructure Management:
+ Design, implement, and maintain cloud environments using Microsoft Azure, ensuring scalability, security, and reliability.
+ Deploy and manage Azure Blob Storage for secure, scalable, and cost-efficient data storage solutions.
+ Set up and manage Entra (Azure Active Directory) for identity management, ensuring seamless integration with on-premises Active Directory.
+ Implement and manage Microsoft Intune and Autopilot to support device management, deployment, and configuration across cloud and hybrid environments.
+ Deploy and manage Virtual Desktop Infrastructure (VDI) on Azure to support remote users.
+ Collaborate with DevOps and development teams to optimise cloud-based environments for automation and software deployment.
On-Premises Infrastructure:
+ Manage and maintain on-premises Active Directory and hybrid identity solutions.
+ Oversee on-premises systems, including VMware virtualised environments and HP ProLiant servers.
+ Ensure high availability, performance, and security of both cloud and on-premises infrastructure.
+ Implement and maintain backup solutions, disaster recovery strategies, and monitoring systems.
Server Administration:
+ Install, configure, and troubleshoot Microsoft Servers (2016, 2019, 2022).
+ Maintain and manage Linux Red Hat servers, including patching, security hardening, and performance optimisation.
Networking:
+ Design and manage on-premises networking infrastructure, including routing, switching, firewalls, and VPNs.
+ Provide advanced troubleshooting for network-related issues and ensure seamless integration between on-premises and cloud environments.
+ Collaborate with network engineers to ensure optimised connectivity, security, and performance between hybrid cloud and on-premises systems.
Collaboration with Development & DevOps Teams:
+ Work closely with developers and DevOps teams to support CI/CD pipelines, automation, and infrastructure-as-code (IaC) deployments.
+ Assist in troubleshooting and optimising applications in both cloud and hybrid environments.
Security & Compliance:
+ Ensure all systems adhere to organisational security and compliance standards, including identity management via Entra and on-premises Active Directory.
+ Implement security measures such as access controls, encryption, and vulnerability management across cloud, on-premises, and hybrid environments., Our transparent interview process involves candidates receiving a list of attribute-based questions in advance. This has been proven to help neurodiverse candidates and others to perform better at interview and is part of our inclusive culture.
We will assess your Experience, Skills and Knowledge as well as Attributes (set out in the professional requirements section) at Interview Stage.
You can read more about Attributes in Ofwat’s Framework for Success.
As part of the interview process, we may require short presentation. Further details will be provided to shortlisted candidates upon invitation to interview.
Please note that the interviews will be conducted via video conferencing software such as Microsoft Teams.
If you have any queries about any aspect of this role, selection process, or you require any reasonable adjustments please email recruitment@ofwat.gov.uk.
Please read the attached "Candidate Information Pack" for details on terms and conditions.
Feedback will only be provided if you attend an interview or assessment.

Security
Successful candidates must undergo a criminal record check.
Successful candidates must meet the security requirements before they can be appointed. The level of security needed is security check (opens in a new window).See our vetting charter (opens in a new window).
People working with government assets must complete baseline personnel security standard (opens in new window) checks.

Nationality requirements
This job is broadly open to the following groups:
+ UK nationals
+ nationals of the Republic of Ireland
+ nationals of Commonwealth countries who have the right to work in the UK
+ nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS) (opens in a new window)
+ nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities who have made a valid application for settled or pre-settled status under the European Union Settlement Scheme (EUSS)
+ individuals with limited leave to remain or indefinite leave to remain who were eligible to apply for EUSS on or before 31 December 2020
+ Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service
Further information on nationality requirements (opens in a new window)

Working for the Civil Service
The Civil Service Code (opens in a new window) sets out the standards of behaviour expected of civil servants.
We recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission's recruitment principles (opens in a new window).
The Civil Service embraces diversity and promotes equal opportunities. As such, we run a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria.
The Civil Service also offers a Redeployment Interview Scheme to civil servants who are at risk of redundancy, and who meet the minimum requirements for the advertised vacancy.

Diversity and Inclusion
The Civil Service is committed to attract, retain and invest in talent wherever it is found. To learn more please see the Civil Service People Plan (opens in a new window) and the Civil Service Diversity and Inclusion Strategy (opens in a new window).

1. Lead criterion: 5+ years of experience in a Cloud Engineer, Systems Administrator, or similar role.
2. Lead criterion: Expertise in Microsoft Azure cloud infrastructure, including Azure Blob Storage, Entra (Azure Active Directory), and VDI.
3. Strong experience managing on-premises Active Directory environments.
4. Proficiency with Microsoft Intune and Autopilot for device management and deployment.
5. Strong hands-on experience with Microsoft Windows Server (2016/2019/2022) environments.
6. Experience with Linux Red Hat server administration.
7. Networking knowledge, including experience with VLANs, firewalls, VPNs, and hybrid cloud networking.
8. Proven experience with on-premises infrastructure, including VMware and HP ProLiant servers.
9. Experience working in an Agile environment and collaborating with DevOps teams on CI/CD pipelines and automation.
10. Understanding of virtualisation technologies, including VMs, containers, and Kubernetes., + Champion and leader of change
+ Builds Trust
+ Delivers outcomes, + 5+ years of experience in a Cloud Engineer, Systems Administrator, or similar role.
+ Expertise in Microsoft Azure cloud infrastructure, including Azure Blob Storage, Entra (Azure Active Directory), and VDI.
In your personal statement please address the lead criteria by telling us about your experience in similar roles and your expertise in Microsoft Azure cloud infrastructure.

Why You Should Join Us:
We’re forward-thinking, creative, innovative, and ambitious. We constantly push the boundaries and embrace new ways of working.
With us, your work matters, your voice is heard, and your impact is felt. Ours is a culture of trust, flexibility, autonomy, collaboration, and innovation. We all want positive change for water customers, the environment, and the future of water.
But for us, change is more than what happens on the outside – we’ve always pushed boundaries internally, too. From becoming the first Civil Service organisation to achieve ‘Smarter Working’ status, to gaining our prestigious ‘Smarter Working Maturity’ award, we’ve consistently demonstrated our commitment to embracing innovative ways of working. Our people do their best work when given freedom over where, when, and how they work. Which is why we trust our teams to balance meaningful collaboration in the office with the flexibility of working from home.
You will also benefit from:
+ Excellent employer pension contributions of 28.97% (around £15,900 to £17,300 per annum for this role). You can find further details about pension schemes under Terms and Conditions in the Candidate Pack.
+ 27.5 days leave (25 days annual leave + 2.5 days privilege leave) increasing to max 32.5 days with each year of service, plus bank holidays
+ Access to exclusive discounts on a variety of goods and services, including retail
outlets, theatre tickets, holidays, insurance, and a gym membership.
+ Flexible working arrangements that suit your lifestyle.
+ Fees paid for membership of relevant professional bodies.
+ Up to 3 volunteering days per year.
+ Generous shared parental leave and pay.
+ Enhanced sick pay.
+ Regular development opportunities.
+ Health and wellbeing initiatives.
+ Season ticket loan for home-to-office travel.
+ Cycle-to-work scheme.