Senior Cloud Security Engineer – Welwyn Garden City, United Kingdom of Great Britain and Northern Ireland

Overview

In this Senior Cloud Security Engineer role, you will serve as the security SME between Technology Security and Cloud Platform Engineering for Tesco’s large Azure estate, guiding security initiatives and policy designs. You will translate Azure concepts for non-experts and collaborate with infrastructure stakeholders to reduce risk while enabling secure, scalable cloud delivery. This position offers impact across security policy, architecture, and live operations within a major retail tech environment.

Pay / Benefits

• Annual bonus up to 20%
• 25 days holiday plus personal day
• Private medical insurance
• Maternity/adoption leave (26 weeks)
• Paternity leave (6 weeks)
• 24/7 virtual GP service and EAP

Responsibilities

• Manage Azure Policy direction and support exemptions
• Design, review, and deliver upcoming Azure Policies and assess policy viability
• Assess suitability and impact of Azure policy exemptions across team/environment/global scope; grant approvals after assessment
• Act as SME advisor on Azure security-related change initiatives to ensure policy compliance
• Deliver centralized controls or reduce friction in consuming infrastructure
• Provide security architecture advice and review control appropriateness with key business functions
• Collaborate with Cloud Platform Engineering and Infrastructure Architect teams to support security deliverables and assess changes with a security lens

Key requirements

• Azure best practices knowledge and teamwork experience
• Demonstrable experience with Azure CLI, PowerShell or Azure Graph REST API
• Minimum 5 years in a senior Azure architecture or engineer role
• Ability to operate independently with limited support and minimal training
• Comprehensive knowledge of Microsoft Azure; familiarity with other clouds helpful but not essential

• Excellent stakeholder communication and collaboration
• Ability to translate technical Azure concepts for diverse audiences
• Proactive, independent and results-driven
• Azure CLI
• PowerShell
• Azure Graph REST API

…