Azure Network Engineer

Job description:

Role Summary

The Azure Network Engineer will be responsible for designing, implementing, supporting, and troubleshooting Azure network infrastructure in a hybrid enterprise environment. The role requires strong hands-on experience with Azure networking, network security, connectivity, monitoring, and production support.

Key Responsibilities

• Design, configure, and support Azure networking solutions including VNets, subnets, NSGs, UDRs, Azure Firewall, and Private Endpoints.
• Manage hybrid connectivity using ExpressRoute, VPN Gateway, and site-to-site/point-to-site VPNs.
• Configure and support Azure Load Balancer, Application Gateway, Traffic Manager, and related connectivity services.
• Troubleshoot network connectivity, routing, DNS, latency, firewall, and application access issues.
• Manage Azure DNS, Private DNS Zones, and DNS integration with on-premises environments.
• Implement and maintain network security controls in accordance with enterprise security standards.
• Monitor Azure network performance and availability using Azure Monitor, Network Watcher, Log Analytics, and related tools.
• Support incidents, service requests, problems, and changes in an ITIL-based production environment.
• Perform root cause analysis for recurring network and connectivity issues and drive remediation.
• Maintain network documentation, configurations, diagrams, operational procedures, and knowledge articles.
• Collaborate with Cloud, Security, Infrastructure, Application, and Service Management teams.

Mandatory Skills

• Strong hands-on experience with Microsoft Azure networking.
• Azure VNets, subnets, peering, NSGs, UDRs, and route tables.
• Azure Firewall and firewall policy management.
• Azure Private Link, Private Endpoints, and service endpoints.
• ExpressRoute, VPN Gateway, and hybrid cloud connectivity.
• Azure Load Balancer and Application Gateway.
• Strong understanding of TCP/IP, DNS, DHCP, routing, NAT, HTTP/HTTPS, and network security concepts.
• Hands-on troubleshooting of Azure and hybrid network connectivity issues.
• Experience with Azure Monitor, Network Watcher, Log Analytics, and network diagnostic tools.
• Experience supporting production incidents, changes, and problem management.
• Strong communication and documentation skills.
• Ability to work from the Chicago K&E office at least two days per week.

Preferred Skills

• Microsoft certification such as Azure Network Engineer Associate (AZ-700).
• Experience with Terraform or other Infrastructure-as-Code technologies.
• Experience with Azure CLI, PowerShell, and network automation.
• Knowledge of hub-and-spoke and Azure Virtual WAN architectures.
• Experience with third-party network/security products such as Palo Alto Networks, Cisco, or F5.
• Knowledge of Microsoft Entra ID and identity-based network security concepts.
• Experience with ServiceNow for Incident, Problem, Change, and Request Management.
• Understanding of Zero Trust and cloud security principles.
• Experience working in large, complex enterprise and hybrid-cloud environments.