Azure Network Engineer

JOB SUMMARY

We are seeking an experienced contract Network Engineer for a 6-month engagement to modernize and ensure network security, compliance, and governance across an enterprise Microsoft Azure environment. This hands-on role will strengthen network segmentation, connectivity, identity-based access, monitoring, and infrastructure provisioning while aligning solutions with organizational controls and Microsoft cloud architecture guidance. The successful candidate will partner with infrastructure, security, cloud, and application teams to reduce risk and deliver sustainable, auditable improvements.
 

KEY RESPONSIBILITIES

· Assess Azure network architecture, configurations, and controls to identify security and compliance gaps.

· Develop and execute remediation plans with clear priorities, dependencies, validation criteria, and supporting documentation.

· Design, configure, and troubleshoot domain name resolution, virtual networks, subnets, network security groups, firewalls, routing, private connectivity, and hybrid network patterns.

· Implement and support site-to-site and point-to-site VPN connectivity and related routing, resiliency, and security controls.

· Configure and optimize Azure Front Door, Application Gateway, load-balancing services, and secure inbound and outbound traffic flows.

· Improve network monitoring, logging, alerting, and operational visibility; investigate findings and verify remediations.

· Automate repeatable network provisioning and policy-aligned configuration through infrastructure as code using Bicep and Terraform.

· Integrate network controls with Microsoft Entra ID, Azure role-based access control, and least-privilege access practices.

· Review Microsoft Defender for Cloud recommendations and coordinate remediation of relevant network security findings.

· Apply Azure Well-Architected Framework and landing zone principles to architecture reviews, network design, and provisioning.

· Produce accurate architecture diagrams, configuration standards, remediation evidence, runbooks, and transition documentation.

· Collaborate with security, compliance, infrastructure, application, and operations stakeholders and communicate risks, decisions, and progress.
 

Required Qualifications

· Bachelor’s degree in Information Systems, Computer Science, or a related technical field.

· At least 10 years of professional experience as a Network Engineer.

· At least 5 years of hands-on experience designing, implementing, and supporting networking solutions in Microsoft Azure.

· Expertise in domain name resolution, virtual networks and subnets, network security groups, firewalls, routing, hybrid connectivity, VPN technologies, and network monitoring.

· Expertise with Azure Front Door, Azure Application Gateway, and Azure load-balancing.

· Strong infrastructure-as-code experience, including Bicep and Terraform.

· Strong understanding of Microsoft Entra ID, Azure RBAC, and least-privilege access.

· Demonstrated ability to troubleshoot complex cloud and hybrid network issues and implement durable corrective actions.

· Ability to translate security and compliance findings into practical technical remediation plans and auditable evidence.

· Experience applying Microsoft Defender for Cloud recommendations in enterprise Azure environments.

· Expertise in developing and maintaining network documentation and diagrams.

· Strong written and verbal communication skills, with the ability to work independently in a contract engagement.
 

Preferred Qualifications

· Microsoft Certified: Azure Network Engineer Associate.

· Familiarity with the Azure Well-Architected Framework, with particular emphasis on landing zone architecture, network topology, security, governance, and automated provisioning.

· Experience supporting regulated or compliance-driven environments.

· Knowledge of HIPAA, HITRUST, SOC2, and NIST security, compliance, and governance best practice recommendations.

TULIT