Cloud Engineer

Hereford (onsite)

Salary: £60k - £70k p/a

Thorn SDS is a niche Managed Service Provider with a Head Office based in Alton, Hampshire, who are committed to enabling technology organisations and professionals to thrive within the Space, Defence and Security sectors. We are currently looking for an experienced Cloud Engineer to work onsite, 5 days per week, at a secure site in Hereford.

About the Role

We are seeking a skilled Cloud Engineer to join our team supporting a mission-critical defence project. As a key member of our infrastructure and DevOps team, you will design, implement, and maintain secure cloud environments that support defence operations, applications, and systems. You’ll work closely with developers, cybersecurity experts, and project managers to ensure cloud services are robust, resilient, and compliant with defence standards.

Key Responsibilities

• Design and manage cloud-based infrastructure using AWS, Azure, or other government-approved platforms.
• Implement Infrastructure as Code (IaC) using tools such as Terraform, CloudFormation, or Ansible.
• Ensure security and compliance with defence and government cloud standards (e.g., IRAP, NIST, ISO 27001, DISA STIGs).
• Develop and maintain CI/CD pipelines to automate deployment and testing processes.
• Collaborate with cyber teams to embed security controls into cloud architectures (DevSecOps).
• Monitor cloud infrastructure performance, availability, and cost efficiency.
• Participate in threat modelling and incident response planning for cloud-hosted services.
• Support container orchestration platforms (e.g., Kubernetes, ECS, AKS) and serverless computing where appropriate.
• Provide documentation, diagrams, and technical guidance to other engineers and stakeholders.
• Contribute to system hardening and configuration management in classified or controlled environments.

Required Qualifications

• Bachelor’s degree in Computer Science, Engineering, Information Technology, or a related field.
• Experience in cloud engineering, DevOps, or systems administration.
• Proven experience with at least one major cloud provider (AWS, Azure, GCP).
• Experience with IaC, DevOps pipelines, and automated testing tools.
• Strong understanding of network security, identity and access management (IAM), and encryption protocols.
• Knowledge of security frameworks applicable to defence (e.g., DoD RMF, ASD Essential Eight, NIST 800-53).

Desirable Skills

• Certifications such as AWS Certified Solutions Architect, Azure Solutions Architect, CISSP, or CISM.
• Experience in a defence, intelligence, or high-assurance environment.
• Familiarity with secure enclaves, air-gapped systems, or hybrid cloud environments.
• Experience with container security tools and supply chain hardening.
• Understanding of Zero Trust Architecture and secure cloud patterns.

What We Offer

• Competitive salary.
• A collaborative team of experts committed to innovation and national security
• 25 days Annual Leave (plus Bank Holidays)
• Employer Pension Contributions
• Group Life Insurance
• Dental Cashback Plan
• Health Cashback Plan
• Wellbeing Services (includes GP, Physio and Savings Benefits)
• Thorn Wellbeing Support Contribution
• Cycle to Work Scheme
• Supported Training & Personal Development Opportunities

Apply

If you have the expertise to support this requirement and are eager to make an impact in a critical role, please apply today!

All applicants must hold the Right to Work in the UK and already possess, or be eligible to obtain, a high level of National Security Clearance.

Due to the nature of our business, your nationality, previous nationalities, and country of birth may influence the types of roles for which you are eligible. For more details, visit the GOV.UK website or click here.