Job Description

About the role

CDS are looking for a

hands-on Cloud Technical Architect

to provide technical leadership across

cloud networking

,

infrastructure

, and

DevOps

, while actively supporting the

Cloud BAU team

. This role requires deep technical expertise across

Cloudflare

(or similar),

Azure (IaaS/PaaS)

, and

Infrastructure as Code

, combined with strong problem-solving capabilities, client-facing confidence, and a delivery-focused mindset.


The ideal candidate will have hands-on experience with a wide range of

Cloudflare and Cloud offerings

, including:-


Expertise in cloud networking and edge services, including

WAF

,

CDN

,

DDoS protection

, and

DNS/DNSSEC

. Strong knowledge of

Zero Trust architectures

and secure access gateways. Experience with

cloud-native firewalls

,

Virtual WAN

, and advanced

traffic routing

. Skilled in

bot management

,

load balancing

,

rate limiting

, and

caching strategies

. Hands-on with

Microsoft Azure IaaS

(VMs, VNets, Load Balancers, NSGs, Storage, Bastion). Proficient in

Azure PaaS

offerings (App Services, Functions, Logic Apps, API Management, Event Hub). Knowledge of

Azure Entra

, Conditional Access, Key Vault, and identity security controls. Experienced in

Infrastructure as Code (IaC)

using

Terraform

, ARM templates, and Bicep. Developed and maintained

CI/CD pipelines

using Azure DevOps and GitHub Actions. Scripting and automation with

PowerShell

Familiar with

monitoring, logging, and alerting

using native Azure tools and third-party platforms. Delivered hybrid and multi-cloud integrations across

Azure

,

AWS

, and on-premises systems &

Cloudflare.

Applied strong security governance and compliance practices in enterprise environments. Comfortable in client-facing roles, with experience translating technical designs into business value.

About CDS

CDS is an agency that enables strategic change in organisations. We help clients create, develop and deliver better services to meet the evolving needs of customers, employees and citizens.


Our experts specialise in technical enablement, operational transformation, experience transformation and business process outsourcing. We improve outcomes by resolving complex insight, digital, data, technology and print challenges.


Consequently, many of the largest, most complex organisations trust CDS to provide solutions that improve health, wealth and safety in the UK. For example:

Digitally transforming the ability to report crime online for UK police forces. Building a new digital platform for the regulator Social Work England. Providing behavioural analysis and insight to drive EE's evolving digital and customer service offering and delivering marketing and operational print management services to the Ministry of Defence

Together with our parent company, Bailie Group, CDS is positioned as a leader in enabling change. We are a multi-award-winning agency recognised by the industries we serve and our peers for our innovations and contributions that truly make a positive difference.

Responsibilities

Lead the architectural design and delivery of scalable, secure, and resilient cloud infrastructure solutions. Provide

hands-on engineering support

to the

Cloud BAU team

, including incident resolution, operational improvements, and platform reliability. Configure, optimise, and manage

Cloudflare services

(or equivalent e.g., Akamai), including

WAF, CDN, DDoS protection, DNS, Zero Trust

,

Magic WAN

, and

Magic Firewall

. Deliver infrastructure solutions using

Microsoft Azure

, covering both

IaaS and PaaS

(e.g., App Services, Azure Functions, API Management, VM's, SQL). Support and integrate with

AWS

, where appropriate, as part of hybrid or multi-cloud environments. Work directly with

clients and stakeholders

, translating business needs into effective technical architectures. Act as a point of escalation and participate in the

on-call support rota

. Maintain and enhance

DevOps workflows

(CI/CD, automation, monitoring, etc.). Provide mentorship and take a leadership role in

problem-solving

and supporting team growth.

Requirements

Essential Skills & Experience:

Experience with

Cloudflare

(or equivalent platforms such as Akamai or Fastly), including

WAF

,

CDN

,

DDoS protection

,

DNS

, and

Zero Trust access tools,

or similar

cloud native edge networking and DDoS mitigation platforms

. Deep knowledge of

Microsoft Azure

, including

PaaS and infrastructure services

. Experience deploying and managing infrastructure using

Terraform

. Familiarity with

AWS services

in a mixed or hybrid cloud environment. Strong understanding of

networking fundamentals

VPNs, DNS, routing, load balancing, firewalls. DevOps capabilities CI/CD pipelines, Git, automation, and secure deployment practices. Comfortable in

hands-on support and escalation roles

. Confident in

client-facing situations

, with strong communication and documentation skills. A

can-do, delivery-driven mindset

, with the ability to take ownership and work effectively under pressure. Willingness to participate in

out-of-hours support

on a rota basis.

Desirable:

Certifications such as: +

Cloudflare Certified

(training and certification support can be provided for the right candidate)
+

Microsoft Azure Administrator / Architect

(AZ-104, AZ-305)
+

AWS Certified Solutions Architect

Experience in

regulated or high-security environment

Vetting

Due to the nature of this role and the business, you will need to either currently hold UK Government clearance to a minimum of SC level or be able to undergo and maintain this level of clearance.

In return

Attractive base salary 25 days holiday + public holidays Company pension and life assurance scheme Medicash health plan online GP access, support services & discounted gym membership Complimentary fruit, coffee, tea, and drinks at the office Wellbeing events/services in Leeds office Cycle to work scheme Season pass loan for rail & bus travel A business focused on professional development and personal growth opportunities Smart, engaged co-workers and a culture of inclusion, innovation, and opportunity

Recruitment Agency Disclaimer:

Bailie Group (including all operational companies under our parent company CDS, CDS Defence & Security, Newspress & Loop) operates with Preferred Suppliers list for recruitment agencies which are reviewed periodically. When we choose to work with a preferred supplier, this supplier will be invited to support us in sourcing candidates for specific roles (submitted via a secure online portal).


Bailie Group (including all operational companies under our parent company CDS, CDS Defence & Security, Newspress & Loop) only pay agency fees where an authorised member of the HR/Recruitment team has provided prior instructions to the recruitment agency to work on our behalf with reference to a particular role. We do not accept unsolicited speculative CVs from recruitment agencies. Receipt of unsolicited CVs via email or any other online platforms does not imply an introduction to Bailie Group (including all operational companies under our parent company CDS, CDS Defence & Security, Newspress & Loop); therefore, no ownership of such candidates will be given. In the event that recruitment agencies submit unsolicited speculative CVs, we retain the right to contact, pursue and hire these candidates directly and consider them for current/future vacancies without any financial obligation to the recruitment agency in question. This will also apply to any CVs sent directly to line managers. Should you wish to be considered as a preferred supplier in the future or feel you have a niche skill set you can help with, then please send some company information to Recruitment@Bailiegroup.co.uk


Naturally, we receive a high level of interest from recruitment agencies, and as such, we will only contact you should we wish to discuss this further, please reframe from sending multiple emails. Submission of any unsolicited speculative CVs to Bailie Group (including all operational companies under our parent company CDS, CDS Defence & Security, Newspress & Loop) will be deemed evidence of full and unlimited acceptance of this statement.

Our inclusive culture

CDS positively encourages applications from suitably qualified and eligible candidates regardless of sex, race, disability, age, sexual orientation, gender reassignment, religion or belief, marital status, or pregnancy and maternity. We foster an inclusive culture that enables everyone to achieve their full potential and enjoy a fulfilling career with us.