Triple Point

Cloud Operations Engineer

In short

This is a hands-on Cloud Operations Engineer role at Triple Point, an investment management firm, to operate and improve its Microsoft Azure and Microsoft 365 environment. The job covers cloud identity (Entra ID/Active Directory), endpoint management (Intune), Azure networking, monitoring (Azure Monitor, Log Analytics, KQL), backup/disaster recovery, security (Defender, patching) and automation (PowerShell, infrastructure as code). It requires at least 2 years of hands-on experience operating production cloud services and working in a regulated environment is a plus. The role is based onsite in London, working closely with the Head of Technology Operations & Cyber, a Senior Cyber Engineer, a Senior DevOps Engineer, the MSP and SOC.

About Triple Point
Since 2004, Triple Point has been bringing investment ideas to life and connecting capital with the right people and opportunities. Today, the company manages more than £2.5 billion for a broad range of investors across five key investment strategies: Private Credit, Social Housing, Clean Heat, Energy and Venture. There are 230+ employees at Triple Point. The company is a certified B Corp, signed up to the Principles for Responsible Investment, and was named a Sunday Times 'Best Place to Work 2025 & 2026'.
The Function
The Digital and Technology function designs, builds and maintains the systems that power Triple Point. It enables secure connectivity, reliable services and innovation, helping colleagues and partners work effectively. Technical Operations & Cyber keeps our technology secure, resilient and reliable while improving the cloud platforms and services colleagues use every day. The team works closely with the wider Digital and Technology function, our managed service provider (MSP), security operations centre (SOC) and business stakeholders.
Role
We're looking for a hands-on Cloud Operations Engineer to operate and continuously improve our Microsoft Azure and Microsoft 365 environment. You'll help keep cloud services secure, available and well governed as we expand our use of cloud services, AI tools and automation. Working with the Head of Technology Operations & Cyber, Senior Cyber Engineer, Senior DevOps Engineer and external partners, you'll manage identity, endpoints, infrastructure, monitoring and recovery. You'll investigate complex issues, communicate risks clearly, document solutions and reduce recurring manual work.
1. Cloud platforms, identity and endpoints
•Administer Azure and Microsoft 365 services, monitoring availability, performance and operational security.
•Manage Entra ID and Active Directory operations, including joiner/mover/leaver processes, groups, role-based access control, Conditional Access, privileged identities and service accounts, in coordination with the Senior Cyber Engineer.
•Maintain Microsoft Intune enrolment, device compliance, application protection and endpoint configuration.
•Support Azure-hosted Windows Server workloads and relevant DNS and DHCP services, simplifying or retiring unnecessary infrastructure where appropriate.
•Manage Azure networking, including virtual networks, network security groups, DNS zones, private endpoints and load balancers.
•Operate Azure Backup and Azure Site Recovery; test recovery arrangements and keep runbooks current.
•Support and maintain physical infrastructure including office networking, firewalls, switching and print services, working with the MSP and vendors to keep on-premises components well managed and aligned to cloud-first principles.
2. Monitoring, incidents and service improvement
•Build and improve meaningful alerts, dashboards and observability using Azure Monitor, Log Analytics and Kusto Query Language (KQL).
•Investigate complex incidents, coordinate resolution with the MSP and other teams, and document root causes and preventive actions.
•Maintain operational runbooks and contribute to ITIL-aligned incident, problem and change management.
•Use service trends and monitoring data to identify emerging risks and recommend improvements.
3. Security and resilience
•Coordinate patching and vulnerability remediation, prioritising action by risk and business impact.
•Work with the Senior Cyber Engineer on security baselines and Microsoft Defender controls across Azure, Microsoft 365 and endpoints.
•Help manage access-control exceptions with appropriate governance and support audits, Cyber Essentials assessments and relevant regulatory reviews.
•Recommend proportionate controls that balance security, reliability and usability.
4. Automation, cost and collaboration
•Use PowerShell and other appropriate tools to automate repeatable tasks and improve consistency.
•Work with the Senior DevOps Engineer to read, run and maintain infrastructure-as-code templates, including Bicep or Terraform.
•Monitor cloud costs and recommend tagging, right-sizing and other opportunities to reduce waste.
•Prioritise work transparently, explain technical trade-offs to non-technical colleagues, collaborate with suppliers and share knowledge across the team.
What success looks like
Success in this role combines reliable technical delivery with the behaviours in Triple Point's High Performance Framework:
•Own It – Takes responsibility for service health and quality, follows incidents through to resolution and communicates progress without prompting.
•Stay Curious – Seeks feedback, learns emerging cloud and AI capabilities thoughtfully, and uses evidence to improve reliability and reduce repetitive work.
•Take Thoughtful Action – Prioritises by impact and risk, makes well-reasoned decisions and translates complex issues into clear next steps.
•Pull Together – Works constructively with colleagues, the MSP and SOC; challenges respectfully and delivers shared outcomes.
•Be Generous – Shares runbooks, lessons learned and practical expertise so others can operate services with confidence.
Requirements
•Hands-on experience operating production cloud services, particularly Microsoft Azure and Microsoft 365.
•Practical experience with Entra ID/Active Directory, identity lifecycle, RBAC, Conditional Access and privileged access management.
•Experience managing endpoints with Intune and supporting Azure networking and cloud-hosted workloads.
•Familiarity with physical network infrastructure including firewalls, switching and print services, sufficient to support day-to-day operations and coordinate with vendors and the MSP.
•Ability to configure monitoring and investigate issues using Azure Monitor, Log Analytics and KQL.
•Working knowledge of Microsoft 365 services (Exchange Online, SharePoint Online, Teams and OneDrive) and relevant security controls.
•Experience with backup, disaster recovery, documented recovery procedures and testing.
•Familiarity with Microsoft Defender technologies, patching and risk-based vulnerability remediation.
•PowerShell scripting skills and an understanding of cloud cost optimisation.
•Experience collaborating through incident, problem and change processes, including with external service partners.
•Clear communication, sound judgement and a practical approach to ownership and continuous improvement.
•Experience with infrastructure as code (Bicep, Terraform or ARM) and/or Python or Bash automation.
•Exposure to Microsoft Sentinel, KQL workbooks or security alert tuning alongside a SOC.
•Experience with hybrid virtualisation or SaaS integrations such as Salesforce.
•Experience in a regulated environment, ideally FCA-regulated.
•Certifications such as AZ-104, AZ-305, AZ-500, SC-300 or MS-102, or equivalent practical experience.
What we offer
•A competitive salary, a comprehensive benefits package, and genuine opportunities for growth and progression.
•Opportunities for professional development and career progression.
•Access to AI tools for every employee, in line with the company's values of staying curious and taking thoughtful action.
•A contributory pension, hybrid/flexible working and ongoing learning and development opportunities.
•A talented, collaborative team in a connected environment where ideas and initiative are valued.

Stop applying.
Get referred.

$10 in free credits

In just 60 seconds, fully on autopilot — Eraldt's AI agents read your CV, map the roles you fit, find live vacancies and the people who can refer you, write personal emails, and get you referred.

This isn't an application: your CV doesn't go to the company, and we don't promise a referral for this exact role.

Discover who else lands interviews on autopilot