Head of Microsoft Cloud and Security Operations (w/m/d)

YOUR MISSION The IT Security & Operations Specialist strengthens War Child Alliance’s ICT security posture and operational reliability by supporting the development, implementation and monitoring of IT security standards and global ICT service operations. The role focuses on digital security, cloud security, identity and access management, endpoint compliance, incident response, and the continuous improvement of ICT operational processes. The Specialist supports the Head of ICT and wider ICT team to ensure systems remain secure, efficient, and resilient, enabling staff across the Alliance to work safely and effectively.  What you will do: * Support the implementation, monitoring, and continual improvement of ICT security controls, cloud security baselines, and secure configuration standards across WCA. * Monitor Microsoft 365/Azure security alerts, investigate potential threats, manage escalations, and support timely incident response and remediation. * Maintain secure user lifecycle processes, access requests, permissions, conditional access rules and MFA compliance to protect WCA’s digital environment. * Support endpoint security policies, Intune device management, compliance enforcement, and the secure configuration of laptops and mobile devices. * Contribute to reliable, secure, and efficient ICT systems by supporting monitoring, maintenance routines, system integrity checks, and operational troubleshooting. * Assist with configuration, monitoring and documentation of Microsoft 365, Azure/Entra ID and related cloud applications to sustain secure digital operations. * Create and maintain documentation, SOPs, quick guides and FAQs on secure system use; support development of internal ICT knowledge resources. *  Support internal awareness campaigns,organisesecurity‑focused training sessions, and promote responsible digital behaviour across the organisation. * Identify inefficiencies, propose improvements, and support the standardisation of ICT procedures and workflows that enhance service quality. * Provide remote support, guidance and technical advice to country ICT staff, ensuring alignment with global IT security requirements and operational standards. ROLE-SPECIFIC OR CONTEXT RESPONSIBILITIES  Here, a line manager can add any specific responsibilities/tasks, if needed/required for the role or the context.   * Monitor cloud and device security dashboards (Microsoft Secure Score, Defender, Entra ID alerts). * Support audit trails, logging, and compliance with IT security policies. * Assist in vulnerability identification and follow‑up of remediation activities. * Maintain MFA enforcement and conditional access configurations. * Ensure compliance with defined endpoint security baselines. * Log, prioritise and help resolve IT security-related tickets. * Assist in managing global IT incidents, analyse root causes and document lessons learned. * Support cloud applications related to security and operations (Defender, Intune, Conditional Access, SharePoint permissions). * Support delivery of training on secure digital behaviour and safe use of tools. * Contribute to ITIL-aligned service improvements. * Support operational readiness for new systems, releases, or changes. YOUR PROFILE KNOWLEDGE, SKILLS, EXPERIENCE     Education  * Degree in ICT, Information Security, InformationSystemsor related field. Experience  * ICT operations or IT security administration, preferably in an international environment;  * Strong cloud security exposure. Languages  * Fluent English;  * Additional WCA languages (Dutch, French, Arabic, Spanish) desirable. (Technical) Knowledge  * Microsoft 365 admin;  * Azure/Entra ID security;  * Intune; endpoint security;  * IAM; conditional access;  * MFA enforcement;   * ITIL framework. WHAT WE OFFER * Location : We work with global teams with team members being based in different locations. War Child is currently operates in: Afghanistan, the Central African Republic, Colombia, DR Congo, Germany, Jordan, Lebanon, the occupied Palestinian territory, South Sudan, Sweden, Syria, Uganda, Ukraine (soon to be registered), and Yemen. We also have offices in the Netherlands and the United Kingdom. Preference is given to applicants who reside and have valid working permits. War Child does not offer relocation. * Type of Contract : Local contract with salary and secondary labour conditions based on the in-country salary scale, local T&C's will apply. * Internals only may apply. Why You Should Apply * Meaningful Impact : Contribute directly to improving the lives of children and families affected by conflict through quality education and long-term, sustainable change. * Professional Growth: Join a dynamic organisation that values learning, innovation, and professional development, with opportunities for capacity building and growth through the role and War Child’s global network. * Global Reach : Play a key role in scaling a ground-breaking programme across multiple conflict-affected contexts worldwide. * Collaborative & Inclusive Culture : Work alongside passionate, mission-driven colleagues in a diverse, inclusive and respectful workplace that prioritises safety, fairness and equal opportunity for all. HOW TO APPLY Qualified candidates are encouraged to submit their applications (CV and motivation letter in English) by June 26, 2026. We are reviewing submissions on a rolling basis, so early applications are strongly recommended. ________________________________________________________________________________ By submitting your application you certify that all of the statements made in your application are true, complete, and correct and are made in good faith. You understand that falsifying, misrepresenting or intentionally withholding information will be grounds for rejection of your application or withdrawal of any offer of appointment or, if an appointment offer has been accepted, this will be ground for employment sanctions, such as, but not limited to, instant dismissal. In addition, you understand that you need to submit a Criminal Record Certificate and that, if you fail to submit it, no employment relationship can be established. Disclaimer * Only applications received via our website are processed. * If we appoint a suitable candidate before the given closing date, we reserve the right to remove the vacancy from our website before that date. In such a case, any responses received after that time are not processed. * It could be that during our selection process the closing date for the vacancy is extended. If so, and you have not yet heard from us, your application will remain active.

Since 2004, we’ve been bringing investment ideas to life and connecting capital with the right people and opportunities. Today, we manage more than £2.5 billion for a broad range of investors across five key investment strategies: Private Credit, Social Housing, Clean Heat, Energy and Venture. These strategies underpin the innovative range of investments we offer to both private (retail) and institutional clients.  There are 230+ employees at Triple Point, all committed to leaving the world demonstrably better than we found it. That’s why we’re a certified B Corp, signed up to the Principles for Responsible Investment, and were named a Sunday Times 'Best Place to Work  2025 & 2026'. If this sounds like an environment where you would flourish, then read on… The Function  The Digital and Technology team designs, builds and maintains the systems that power Triple Point. The function enables seamless connectivity, security and innovation across the organisation, creating tools and platforms that help colleagues and partners work smarter and deliver excellent outcomes.  The Team  This role sits within Technical Operations & Cyber, within the wider Digital and Technology function. The role works closely with colleagues across D&T, our MSP, our SOC and stakeholders across the business. The team is responsible for keeping our technology secure, reliable and high performing while improving delivery pace through automation, cloud engineering and emerging technology.  The Role  We are seeking a Senior DevOps Engineer to lead hands-on DevOps and platform engineering across Triple Point’s Microsoft cloud and AI delivery landscape.  You will design, build and operate secure deployment pipelines, automation, monitoring and infrastructure-as-code patterns that enable cloud and AI workloads to move safely and at pace. As our use of Claude Code, AI agents and automation grows, this role will provide the engineering foundations to run these capabilities reliably, securely and with clear governance.  Working closely with the Head of Technical Operations & Cyber and our Senior Cyber Engineer, you will help enable pragmatic, risk-aware decisions on cloud and AI tooling, ensuring a balance between delivery pace and security, governance and operational sustainability.  This is a delivery-focused role owning engineering work end-to-end, from discovery and design through to implementation, documentation and transition into BAU. You will help remove delivery bottlenecks, strengthen platform maturity and make practical recommendations that balance pace, reliability, security and usability.  Key Responsibilities  DevOps, Cloud Platform & CI/CD Engineering  * Design, build, maintain and improve CI/CD pipelines for cloud, integration, automation and AI workloads.  * Create reusable infrastructure-as-code patterns, templates and standards for secure, consistent cloud deployments.  * Improve release management, environment management and deployment controls across development, test and production environments.  * Support source control, branching, build, test and deployment practices that help teams deliver safely and efficiently.  * Build practical engineering standards for service principals, managed identities, secrets, configuration, certificates and environment separation.    Automation, AI Enablement & Developer Experience  * Enable safe, reliable deployment and operation of Claude Code, AI agents and similar AI-assisted development tooling.  * Automate repeatable operational, deployment and monitoring tasks to reduce manual effort and improve consistency.  * Develop self-service patterns, reusable scripts and documentation that make it easier for colleagues to adopt approved engineering practices.  * Work with current and future AI Team colleagues to lay the technical foundations for agent automation and cloud-based AI delivery.  * Identify opportunities to simplify tooling, reduce friction and improve the developer and stakeholder experience.    Reliability, Monitoring & Operational Readiness  * Design and improve monitoring, logging, alerting and reporting across pipelines, platforms and cloud workloads.  * Create runbooks, deployment checklists and operational handover materials that support effective BAU ownership.  * Support incident response, root-cause analysis and continuous improvement for deployment or platform reliability issues.  * Improve resilience, recovery and performance practices for key services and automation workloads.  * Use data from monitoring and service performance to recommend improvements and prioritise platform work.    Security, Governance & Documentation  * Embed security-by-design into DevOps practices, including least privilege, secure configuration, secrets management and change control.  * Work closely with Technical Operations & Cyber, the SOC and MSP partners to ensure cloud and AI tooling is operated securely.  * Maintain clear documentation of pipeline designs, infrastructure standards, access models, monitoring arrangements and operational guardrails.  * Support audits, assurance activity and evidence gathering where DevOps, cloud or platform controls are in scope.  * Balance security, usability and delivery pace when assessing risks, trade-offs and recommendations.    Collaboration, Planning & Continuous Improvement  * Plan and prioritise DevOps improvements based on impact, value, risk and delivery needs.  * Translate technical complexity into clear recommendations for technical and non-technical stakeholders.  * Partner constructively across Digital and Technology, internal stakeholders and external technology partners.  * Challenge current ways of working where needed and recommend pragmatic improvements with clear rationale.  * Share knowledge generously and help raise DevOps capability across the function and organisation.    Knowledge & Experience  Essential  * Significant hands-on experience in DevOps, platform engineering, cloud engineering or a closely related engineering role.  * Strong experience designing and maintaining CI/CD pipelines using tools such as Azure DevOps, GitHub Actions, GitLab CI or equivalent.  * Good working knowledge of Microsoft Azure and Microsoft cloud services, including deployment, access, monitoring and governance considerations.  * Experience with infrastructure-as-code and automation tools such as Terraform, Bicep, ARM templates, PowerShell or equivalent.  * Proficiency in Python for scripting, automation and tooling able to write, read and maintain production-quality scripts, not just adapt examples.  * Working knowledge of core Azure networking concepts, including VNets, NSGs, DNS, private endpoints and load balancers, with practical experience applying these in cloud and containerised workloads.  * Strong understanding of Git, source control workflows, release management, environment management and secure software delivery practices.  * Experience implementing monitoring, logging and alerting for cloud platforms, pipelines or application workloads.  * Strong grounding in cloud security principles, including identity and access, least privilege, secrets management, network security and secure configuration.  * Awareness of cloud cost management principles, including resource tagging standards, right-sizing, and governance for spend able to recommend efficient, cost-conscious approaches rather than just functional ones.  * Ability to translate technical requirements and risk considerations into pragmatic, well-documented engineering solutions.  * Comfortable working with the Head of Technical Operations & Cyber to make pragmatic, risk-aware decisions that balance delivery pace with security and governance requirements.  * Excellent communication skills, with the ability to work effectively with technical teams, senior stakeholders and external partners.  * A self-starter mindset, with strong planning, problem-solving and ownership of delivery outcomes.    Desirable  AI & Automation  * Experience deploying, governing or operating AI-assisted development tools, agent automation or cloud-based AI workloads.  Microsoft Platform  * Experience working with Microsoft 365, Entra ID, Intune, Sentinel, Azure Monitor, Log Analytics or similar Microsoft tooling.  * Relevant certifications such as AZ-400, AZ-104, AZ-305, AZ-500, Terraform Associate, GitHub certifications or equivalent hands-on experience.  Containers & Orchestration  * Experience with containers and orchestration technologies such as Docker, Kubernetes or Azure Container Apps.  Broader Platform & Integrations  * Experience supporting Salesforce, data platform, integration or business automation workloads.  Regulated Environments  * Experience working in a regulated services environment, ideally FCA-regulated.  Why Join us?  This is a key role at the point where DevOps, cloud automation and AI capability are becoming central to how Triple Point delivers technology safely and effectively.  * You’ll join a talented, collaborative team in a connected environment where ideas and initiative are valued.  * Be part of a growing and innovative team.  * We offer a competitive salary, a comprehensive benefits package, and genuine opportunities for growth and progression.  * Opportunities for professional development and career progression.  At Triple Point, high performance means living our values every day:  * Stay Curious.  * Be Generous.  * Take Thoughtful Action.  * Pull Together.  * Own It.  In line with our values Stay Curious and Take Thoughtful Action every employee has access to AI tools.  We see technology as a co-pilot, helping us improve efficiency and insight while keeping decisions grounded in thoughtful human judgement.  Triple Point offers a wealth of benefits including a contributory pension, hybrid/flexible working and ongoing learning and development opportunities. Check out our comprehensive list of benefits HERE.  Apply today for further information! Triple Point is dedicated to providing fair and equal opportunities for all individuals, including both current and potential employees. Discrimination of any kind based on factors such as age, disability, gender, sexual orientation, pregnancy, race, ethnicity, religion, gender identity, or marital status is not tolerated by the company. Our aim is to create a welcoming and diverse work environment where people from all walks of life feel valued and supported. We actively encourage individuals from various backgrounds to apply for job vacancies and become part of our team.  STRICTLY NO AGENCIES