Cloud Infrastructure Architect

About the role

Acorn Insurance are looking for a passionate Cloud Infrastructure Architect who will be responsible for designing, implementing, and optimising secure, scalable, and highly available cloud platforms. This role provides technical leadership across cloud strategy, architecture governance, infrastructure modernisation, and operational excellence.

Key responsibilities

• Develop end‑to‑end cloud architectures covering compute, storage, networking, identity and automation.
• Create reference architectures, design patterns and technical standards for Azure, AWS and GCP.
• Lead design and implementation of core cloud components such as virtual networks, identity & access, monitoring, encryption and backup strategies.
• Define Infrastructure‑as‑Code patterns using Terraform, Bicep or ARM templates.
• Support migration of on‑premise workloads to cloud platforms following best‑practice frameworks.
• Implement Zero Trust principles, network segmentation, encryption, key management and secure access controls.
• Develop automation and optimisation strategies to improve performance, cost efficiency and availability.
• Conduct capacity planning, resilience engineering, disaster‑recovery design and performance tuning.
• Mentor engineers and act as a trusted advisor for cloud strategy and infrastructure initiatives.

Required profile

• 3+ years hands‑on experience across networking, infrastructure, cloud platforms and system administration.
• Extensive experience designing and supporting cloud infrastructure on Azure, AWS or GCP.
• Strong understanding of networking concepts (VNETs/VPCs, routing, DNS, load balancing, firewalls).
• Deep knowledge of Infrastructure‑as‑Code and automation tooling.
• Experience with container platforms (AKS, EKS, GKE, Kubernetes) and serverless architectures.
• Proven ability to build scalable, resilient and secure cloud architectures.

Required skills

• Azure
• AWS
• Google Cloud Platform (GCP)
• Terraform
• Bicep
• ARM templates
• Kubernetes (AKS, EKS, GKE)
• Container platforms
• Serverless architectures
• Azure AD / IAM / RBAC
• VNET / VPC design
• DNS, load balancing, firewalls
• Zero Trust security
• Encryption and key management
• Monitoring and logging
• FinOps and cloud cost optimisation
• Disaster recovery and resilience engineering

What we offer

• Up to 35 days holiday (including bank holidays) with buy/sell options.
• 24/7 mental health support and free counselling.
• Hybrid working options to support work‑life balance.
• Flexible benefits, including early access to salary via an internal platform.
• Recognition awards, social events and career development programmes.