[Hiring] Cloud Infrastructure Engineer @Nucleus Group

Role Description

The Cloud Infrastructure Engineer works day-to-day on all aspects of managing and maintaining the cloud infrastructure environments that support the software platform we provide to our customers, as well as our internal systems. This is a hands-on, deeply technical role operating within a regulated financial services environment, where our infrastructure is directly accessed by customers and connected to third-party trading, settlement and market data services.

The successful candidate will combine strong core Azure and Windows infrastructure skills with genuine depth in networking, firewalling, directory services and database administration. They will be comfortable owning complex, business-critical migrations end-to-end, liaising directly with vendors and customers, and producing high-quality documentation to support the wider team and our audit and compliance obligations.

Qualifications

• Proven experience in a similar technical role involving infrastructure and cloud technology.
• Experience in an environment providing and supporting B2B customer-facing technology.
• Experience working within a regulated or externally audited industry, with an understanding of contractual obligations and control frameworks such as ISO 27001, SOC 2 / ISAE 3402 / AAF, and CIS benchmarks/controls (or equivalents such as NIST).
• Excellent communication and interpersonal skills.
• Self-motivated, and capable of tackling complex projects either on their own or as part of a team.
• Able to work collaboratively across different departments/teams with differing technical capabilities, and with external customers and vendors, to deliver effective solutions.
• Proven experience with Microsoft Azure and Windows Server administration.
• Strong networking and firewalling depth, in particular NAT/PAT, site-to-site (IPsec) VPN, routing and DNS.
• Advanced Active Directory administration, including trusts, Kerberos delegation and certificate management.
• Microsoft Entra ID / Azure AD in depth – Enterprise applications, SSO, Conditional Access, hybrid identity.
• Microsoft SQL Server administration – backup/restore and recovery, security/permissions, SQL Agent job management.
• Knowledge of Windows-based IIS application administration.
• PowerShell scripting.
• Office 365 administration and automation.
• Experience with backup and DR tools and processes.
• Strong documentation skills and experience managing third-party vendors/suppliers.

Requirements

• Managing internal and customer server infrastructure on Microsoft Azure, including VMs, Network Security Groups, ExpressRoute, Application Gateways/WAF and other key Azure resources.
• Designing, configuring and troubleshooting network connectivity between customers, third parties and our platform, including site-to-site VPNs, routing, NAT/PAT and DNS.
• Administering internal and customer-facing firewalls, in particular Fortinet FortiGate.
• Building and maintaining connectivity to external trading, settlement and market data services (e.g. payment/settlement gateways such as CREST, and trading interfaces).
• Administering and maintaining Active Directory, including trusts, Kerberos delegation, certificate services and certificate lifecycle management.
• Maintaining and supporting Microsoft SQL Server, including patching, monitoring and day-to-day administration, and maintaining our high availability and disaster recovery configurations.
• Testing and maintaining backups and DR processes (including invocation testing) to ensure they meet contracted RPO/RTO obligations.
• Managing and maintaining the Microsoft 365 environment and associated tools.
• Maintaining external-facing infrastructure (e.g. web servers, reverse proxies, DNS and public certificates).
• Routine patching and maintenance of servers and firewalls.
• Maintenance of our software and associated components on Third Platform Services (TPS).
• Responding to IT audit and customer due-diligence information requests and providing supporting evidence.
• Work alongside group information security to ensure infrastructure is designed, configured and maintained in line with security policies, control frameworks and audit requirements, and to support remediation of identified risks and vulnerabilities.
• Managing relationships with third-party vendors and suppliers (e.g. Microsoft, Fortinet, connectivity and settlement providers), including technical liaison, escalations and coordinating delivery of changes.
• Producing and maintaining clear technical documentation, runbooks and knowledgebase articles to support the team, ensure resilience of knowledge, and satisfy audit requirements.
• Monitoring and responding to alerts as they arise from the infrastructure and monitoring platforms.
• Out-of-hours work for routine maintenance and occasional project work.
• Working on other IT projects relating to infrastructure and security as required.
• Contributing to team planning.

Benefits

• Generous blend of benefits for the things that really matter to our people, including a non-contributory pension.
• Bonus.
• Enhanced parental leave.
• Paid time off for emergencies.
• Health and wellbeing initiatives.
• Flexible working options.