M Group

Cloud security engineer for critical infrastructure

In short

This role secures Microsoft Azure and Microsoft 365 environments for public sector and financial clients at a specialist cyber security consultancy (Cyro Cyber, part of MGroup) in London. It covers cloud identity, privileged access, networking, workload protection and Infrastructure-as-Code-based security automation, along with technical design, documentation and client-facing consultancy work. It demands hands-on Azure security expertise (Entra ID, PIM, Defender for Cloud, Key Vault, Azure Policy), IaC/scripting skills (Bicep, Terraform, PowerShell or Azure CLI), and eligibility for UK Security Clearance.

About the company: You'll be joining Cyro Cyber, part of MGroup, a specialist cyber security consultancy founded in 2021 to help public sector and financial organisations protect their Critical Digital Infrastructure. While Cyro Cyber has grown in size, reach and expertise, its core purpose remains the same: delivering trusted, independent cyber security advice and services to keep clients safe in an ever-evolving threat landscape.
Responsibilities:
•Implementing and improving Azure and Microsoft 365 security controls
•Securing cloud identities, privileged access, networks, workloads and data
•Developing automated, repeatable security solutions using Infrastructure as Code
•Producing technical designs, documentation and operational standards
•Conducting security reviews, hardening activities and technical assurance
•Supporting clients and project teams with expert cloud security guidance
Requirements:
•Strong hands-on experience engineering and securing Microsoft Azure environments
•Practical capability across several Azure security domains, including identity, governance, networking, workload protection, logging and secrets management
•Experience with Microsoft Entra ID, including practical exposure to Privileged Identity Management, together with experience across a selection of Azure security technologies such as Azure Policy, Defender for Cloud, Key Vault, Azure Monitor and Log Analytics
•Experience using infrastructure-as-code or scripting tools such as Bicep, Terraform, PowerShell or Azure CLI
•Ability to interpret architectural requirements and translate HLDs into accurate LLDs, build documentation, test plans and operational runbooks
•Strong troubleshooting skills and experience resolving cloud configuration, access, policy and integration issues
•Understanding of cloud security principles including least privilege, defence in depth, secure-by-design, segmentation, encryption and continuous monitoring
•Good client-facing communication, documentation and stakeholder engagement skills
•Ability to work autonomously under general direction, lead defined work packages and guide colleagues where appropriate
•Eligibility for UK Security Clearance (successful appointment will be subject to being granted Security Clearance)
•Willingness to work across a varied portfolio of cloud security engineering activities, applying existing strengths while developing capability in other areas
Benefits:
•Matched or contributory pension scheme
•Online GP service, 24 hours a day, 365 days a year
•Employee assistance programme
•My Rewards portal, access to 1000's of retail discounts
•Life assurance
•Enhanced maternity, paternity leave and adoption leave
•Reward and recognition scheme
•My Car Choice — salary sacrifice EV/Hybrid car scheme
•Private health care and health care cash plan
•Discretionary bonus schemes
•26 days annual leave plus bank holidays
•Recommend a friend — get rewarded for introducing people to us

Stop applying.
Get referred.

$10 in free credits

In just 60 seconds, fully on autopilot — Eraldt's AI agents read your CV, map the roles you fit, find live vacancies and the people who can refer you, write personal emails, and get you referred.

This isn't an application: your CV doesn't go to the company, and we don't promise a referral for this exact role.

Discover who else lands interviews on autopilot