Jellycat

cloud engineer in retail

In short

This role manages and secures a company's Azure cloud estate — infrastructure, identity, networking, and security — for a global retail toy brand. It requires 2–3 years of hands-on Azure or MSP engineering experience, strong Microsoft security tooling knowledge (Defender, Sentinel, Intune, PIM), Windows Server/AD administration, PowerShell/Azure CLI scripting, and an AZ-104 certification. The job is remote-friendly but based around London, with occasional travel between sites and after-hours support for critical incidents.

About Jellycat
Jellycat creates original soft toys known for their whimsical expressions, soft fabrics, and distinctive designs. Its toys are loved and collected by people of all ages around the world.
Responsibilities
•Configure, maintain, and support the Azure estate, including cloud services, servers, storage, networking, DNS, and email security systems
•Administer Entra ID, including Conditional Access, Privileged Identity Management, and hybrid identity components
•Design, deploy, and manage cloud infrastructure and services using infrastructure as code and configured Azure Policy
•Apply security-first principles proportionate to business risk and ensure adherence to IT security standards and policies
•Monitor Azure platform health and performance, tune alerts, and address issues proactively
•Lead the resolution of infrastructure incidents and major outages through Halo ITSM and the change process
•Provide third-line escalation support to the IT Service team when required
•Conduct routine vulnerability assessments and coordinate remediation through to closure
•Maintain clear, up-to-date documentation of cloud infrastructure, configurations, processes, and changes
Requirements
•2–3 years of hands-on Azure Engineering or Managed Service Provider (MSP) experience supporting multiple sites or customers
•Experience implementing least-privilege principles, Zero Trust architecture, and security best practices appropriate to business risk
•Strong experience with Microsoft security technologies, including Defender, Purview, PIM, Sentinel, and Intune
•Experience administering Windows Server environments in cloud-hosted virtual infrastructures, including Active Directory, DNS, and Group Policy
•Strong hands-on experience with Microsoft Azure IaaS and PaaS, including networking, identity and access management, backup, and monitoring
•Strong troubleshooting skills and the ability to research and resolve problems independently
•Understanding of Azure Landing Zone principles and best practices
•Experience scripting and automating tasks using PowerShell and Azure CLI
•Microsoft AZ-104 certification expected
•Collaborative approach and ability to build relationships across global and local IT teams
•Ownership, accountability, and ability to manage tasks and projects through their full lifecycle with minimal supervision
•Strong analytical, troubleshooting, and decision-making skills, including knowing when to escalate
•Commitment to continuous learning and professional development
•Track record of creating and maintaining clear, accurate documentation for knowledge sharing and operational continuity
•Flexibility and reliability to meet agreed deadlines, travel between sites, and support critical infrastructure activities outside standard working hours when required
Nice to have
•AZ-500, AZ-305, SC-300, or Terraform Associate certification
•Exposure to Cyber Essentials Plus, CIS, or PCI DSS
Conditions
•Location: London
•The role may require travel between sites
•Critical infrastructure activities may require support outside standard working hours

Stop applying.
Get referred.

$10 in free credits

In just 60 seconds, fully on autopilot — Eraldt's AI agents read your CV, map the roles you fit, find live vacancies and the people who can refer you, write personal emails, and get you referred.

This isn't an application: your CV doesn't go to the company, and we don't promise a referral for this exact role.

Discover who else lands interviews on autopilot