Infrastructure Cloud Engineer needed at Stonehage Fleming

• We are seeking a skilled and proactive Cloud Engineer to join our IT team. In this role, you will be responsible for managing, securing, and optimizing our Microsoft 365 and Azure environments. You will work across core services including Entra ID (formerly Azure AD), Intune, Microsoft Defender, and a range of Azure IaaS and PaaS solutions. 
• The position reports to the Director of Infrastructure & Security and is based in Cape Town. Other working relationships include all members of the IT team, all users’ worldwide and external suppliers.

OVERALL PURPOSE
The overall purpose of this position is to:

• Administer and support Microsoft 365 services, including:
• Entra ID (identity and access management)
• Intune (mobile device and endpoint management)
• Microsoft Defender (endpoint security and threat protection)
• Exchange Online and Teams (emails and unified communications)
• SharePoint Online (productivity and collaboration)
• Design, deploy, and manage Azure services such as virtual machines, storage, networks, and VPNs
• Develop and maintain Azure platform services such as App Services, Azure SQL, Functions, and Logic Apps
• Ensure security, compliance, and governance across all Microsoft cloud services
• Automate processes using PowerShell, Azure CLI, ARM/Bicep templates
• Monitor system health and performance using tools like Azure Monitor and Log Analytics
• Collaborate with internal stakeholders to support cloud initiatives and resolve incidents
• Manage and support hybrid identity management, including SSO and Conditional Access
• Maintain comprehensive documentation and provide training or support when needed
• Participate to the resolution of complex problems

QUALIFICATIONS AND EXPERIENCE

• Qualified to graduate level
• Minimum 3 years’ experience with Security incident handling
• Experience in a SOC is an advantage
• Certifications such as GCIH, GSEC, GCFA highly valued
• Certifications such as CCNA and MCSA an advantage

SKILLS

• Good experience with email and alerts/incident investigation
• Proficient in Microsoft 365 technologies: Entra ID, Intune, Microsoft Defender
• Strong hands-on knowledge of Azure services (IaaS/PaaS)
• Solid scripting and automation experience (PowerShell, Azure CLI)
• Solid knowledge of identity and access management, MFA, and Conditional Access
• Knowledge of cloud networking, firewalls, and VPN configurations
• Understanding of security best practices (Zero Trust, compliance, encryption)
• Experience with monitoring and troubleshooting in Microsoft cloud environments
• Ability to implement and maintain Infrastructure as Code (ARM, Bicep, Terraform)
• Good knowledge of general IT systems and TCP/IP networking

COMPETENCIES AND BEHAVIOURS

• Good communications skills
• Highly organized and able to collaborate with virtual teams
• Strong interests in hybrid infrastructures and Microsoft 365 and Azure technologies
• Proven analytical and problem-solving abilities
• Takes proactive initiatives in identifying improvements and anticipating potential issues
• Maintains a strong focus on protecting systems, data, and users
• Keeps up with the evolving Microsoft ecosystem and cloud trends
• Prioritizes service excellence and supports end-user needs
• Stays composed and solution-focused in high-pressure or fast-changing environments
• Takes full responsibility for deliverables and drives tasks to completion