Director - Cloud Infrastructure

EMPLOYMENT TYPE: Permanent DEPARTMENT: Information Systems DIVISION: Group WORKPLACE STRUCTURE: Hybrid Role Overview PURPOSE OF JOB JTC is in its Genesis era: a period of deliberate transformation in which we are investing in the platforms, people and processes that will define the next decade of growth. Technology is no longer a support function; it is the engine of our competitive differentiation. The Director - Cloud Infrastructure is a pivotal hire for this moment. We are migrating complex, mission-critical workloads across multiple jurisdictions, many built on systems with limited or no documentation, onto modern, resilient cloud platforms. JTC's architecture is Microsoft-primary, and this role owns the cloud engineering practice that underpins it: Azure governance, landing zones, hybrid connectivity, and the secure foundations on which our AI programme is built. We need an engineer with the depth to tame that complexity: someone who can walk into an undocumented environment, reverse-engineer what exists, and produce the structured documentation that becomes the foundation for everything that follows. Our infrastructure carries client assets, regulatory obligations and audit trails across multiple regulators. The right candidate understands this instinctively, having operated production cloud systems in regulated environments and brings that rigour into every design decision, security posture and recovery test they run. This role sits at the intersection of infrastructure and intelligence. As JTC accelerates its AI programme, the Director, Cloud Infrastructure will work shoulder-to-shoulder with AI Engineering and Data Engineering to design and scale the compute, storage and networking fabric that makes our models possible. This is a hands-on role for someone who is energised by hard technical problems and by making the engineers around them more effective. If you want to shape infrastructure at scale in a firm that genuinely values technical excellence, this is the role. Main Responsibilities And Duties CLOUD MIGRATION & PLATFORM ENGINEERING - Lead end-to-end cloud migration programmes across JTC's multi-geography, multi-system estate, ensuring workloads move safely, on schedule and with minimal disruption to live operations. - Own the migration strategy, sequencing and tooling, from discovery and assessment through to cutover and post-migration optimisation. - Design target-state cloud architectures (multi-cloud and hybrid where appropriate) that satisfy the availability, latency and data-residency requirements of each jurisdiction. - Own Azure governance end-to-end: management group hierarchy, landing zones, policy assignments, networking and cost management, as JTC's primary cloud platform. - Establish and enforce cloud engineering standards and guardrails across AWS, Azure and GCP environments; lead adoption of multi-cloud tooling where operationally justified. - Own Microsoft 365 platform governance, external collaboration policies, licensing optimisation and the integration of M365 services into JTC's security and identity controls. - Drive continuous platform improvement: reduce cloud spend, increase reliability and compress mean time to recovery across all production systems. LEGACY SYSTEM DISCOVERY & STRUCTURED DOCUMENTATION - Many of the systems you will inherit have grown organically in environments where documentation was never prioritised. A core part of your remit is to change that systematically and permanently. - Conduct structured technical discovery on undocumented or poorly documented systems: infrastructure topology, dependency mapping, data flows and failure modes. - Produce high-quality, version-controlled architectural and operational documentation. runbooks, recovery procedures, network diagrams that becomes the authoritative record for each system. - Lead the technical integration of acquired businesses: identity and data migration, network consolidation and the controlled decommissioning of legacy platforms. - Introduce tooling, infrastructure-as-code, automated topology scanning, runbook templates that makes documentation a by-product of engineering rather than an afterthought. - Maintain a living infrastructure knowledge base, ensuring it remains accurate and accessible as systems and teams evolve. PRODUCTION OPERATIONS, SECURITY & RELIABILITY - JTC operates in markets that do not pause, under regulators who expect evidence. You will be hands-on across the full stack of production reliability and security, not delegating these concerns but owning them technically. - Own SLA/SLO definitions and ensure production cloud environments meet or exceed agreed targets; build the monitoring and alerting that makes that evidence visible. - Act as technical lead for major cloud infrastructure incidents: direct containment and recovery, chair blameless post-mortems and drive preventive actions through to verified closure. - Own identity and access security across cloud and hybrid directories: privileged access governance, conditional access, and the integrity of the IAM boundary between on-premises and cloud. - Own the cloud security posture: network segmentation, firewall governance, secrets management, vulnerability scanning and timely remediation within agreed SLAs. AI & DATA INFRASTRUCTURE PARTNERSHIP - JTC's AI programme is accelerating. You will be the primary infrastructure partner to AI Engineering and Data Engineering designing and delivering the compute and data fabric that makes our models possible and ensuring it is operated with the same rigour as any other production workload. - Design and build GPU/high-performance compute environments for model training and inference, including cluster provisioning, network fabric and storage tiering. - Architect scalable, low-latency data pipelines and storage layers — data lakes, vector stores, streaming infrastructure, in close collaboration with Data Engineering. - Ensure AI workloads are provisioned, monitored, secured and cost-managed with the same discipline as any other production service. - Work directly with AI Engineering on containerisation, Kubernetes orchestration and CI/CD pipelines for ML model deployment, contributing hands-on where your expertise accelerates delivery. - Support the responsible use of AI within infrastructure operations, monitoring triage, documentation generation, anomaly detection in line with JTC's AI governance framework. INFRASTRUCTURE AUTOMATION & SECURITY ENGINEERING - Automation is how we scale without proportionally scaling headcount. Security is built into the delivery pipeline, not bolted on after the fact. - Drive a fully infrastructure-as-code approach using Terraform, Bicep or equivalent, every production infrastructure change tracked in version control and deployed through a pipeline. - Build and mature CI/CD pipelines for infrastructure provisioning, configuration, testing and deployment across all environments, with separation of duties and approval gates for production. - Embed security controls into pipelines: policy-as-code (Open Policy Agent or equivalent), secrets management, dependency scanning and automated compliance evidence generation. - Implement FinOps discipline: tagging strategies, cost allocation, anomaly detection and rightsizing programmes to ensure cloud spend is transparent, attributed and justified. - Automate routine operational activity, patching, health checks, user lifecycle management, reporting, freeing engineering time for higher-value work. - Establish and enforce patch and change management disciplines: tested, staged and reversible updates; no unauthorised change to production. e Ssential Requirements - Proven, hands-on track record of leading cloud migrations at scale, multi-system, multi-geography environments with live production constraints. - Deep practical expertise across Azure (primary) and at least one other major cloud platform (AWS or GCP); experience governing hybrid/multi-cloud estates end-to-end. - Infrastructure-as-code fluency: Terraform and/or Bicep; GitOps-based operational practices; CI/CD pipelines for infrastructure delivery. - Microsoft 365 administration and governance: external collaboration, licensing, security and compliance centre. - Strong cloud security background: IAM, network segmentation, secrets management, vulnerability management, SIEM integration and compliance frameworks (ISO 27001, SOC 2, FCA SYSC). - Kubernetes and containerisation expertise: cluster management, workload scheduling, service mesh and GitOps delivery pipelines. - Production experience running infrastructure that supports AI or ML workloads: GPU compute, vector stores, high-throughput data pipelines. - Solid backup and disaster recovery background: resilient architecture design, RTO/RPO definition by service tier and evidenced recovery testing. - Demonstrated ability to reverse-engineer and document undocumented or legacy systems; strong technical writing and diagramming. - Experience working in, or as a direct technology partner to, regulated financial services with a clear understanding of operational resilience, audit and data protection obligations. - FinOps discipline: cost transparency, tagging governance, anomaly detection and rightsizing as everyday operational practice. - Calm, technically credible incident lead: able to direct containment and recovery under pressure and communicate clearly to senior stakeholders. OUR COMMITMENT TO INCLUSION & WELLBEING JTC is committed to fostering a healthy, inclusive organisation where all individuals feel welcome and feel able to participate in the workplace fully. We value different perspectives, backgrounds and lived experiences. This includes supporting employee wellbeing so that people feel equipped to thrive.