Job description

About the position Responsibilities • Design, implement, and maintain secure, scalable Azure network architectures, including VNets, subnets, firewalls, NSGs, and routing. • Configure and optimize Azure networking services such as VPN Gateway, ExpressRoute, Azure Firewall, Application Gateway, and Front Door. • Lead advanced troubleshooting across hybrid network environments, authentication flows, and Azure connectivity services. • Ensure high availability, performance, and security of Azure networking and infrastructure components. • Collaborate with security and platform teams to design secure service-to-service and hybrid connectivity solutions. • Maintain infrastructure using Infrastructure-as-Code (Terraform, ARM templates, or Bicep). • Contribute to the evolution of network monitoring, alerting, and incident response processes. • Ensure compliance with enterprise security, identity, and access control policies. • Other duties as assigned. Requirements • 5+ years in cloud infrastructure (Azure) and advanced network engineering. • Hands-on expertise with Azure networking components: VNets, subnets, VNet peering, ExpressRoute, VPN Gateway, Azure Firewall, Application Gateway, Front Door, and Load Balancers. • Strong understanding of networking concepts: DNS, firewalls, routing, BGP, HTTP/S, SSL/TLS, IP addressing, and the OSI model. • Experience with hybrid cloud connectivity solutions and network security best practices. • Proficiency with Infrastructure-as-Code (Terraform, ARM templates, or Bicep). • Hands-on experience managing and troubleshooting Azure AD, RBAC, and network access policies. • Familiarity with identity and authentication protocols (OIDC, SAML, LDAP). • Experience with CI/CD tools for infrastructure deployments (GitHub Actions, Azure DevOps). • Strong communication and collaboration skills across infrastructure, security, and operations teams. • Must be eligible to obtain and maintain a Public Trust or Suitability/Fitness determination. Nice-to-haves • Experience designing secure, high-performance Azure network topologies for enterprise-scale workloads. • Background in enterprise network engineering, including integration of on-premises and cloud networks. • Experience in operational support and incident response for large-scale, distributed systems. • Familiarity with cloud-native security architectures and zero-trust networking models. Benefits • Paid Time Off: 5.67 hours accrued per pay period / 136 hours accrued annually • Paid Holidays: 11 • California residents receive an additional 24 hours of sick leave a year • Medical, Dental, Vision, Prescription • Employee Assistance Program • Short- & Long-Term Disability • Life and AD&D Insurance • Flexible Spending Account • Health Savings Account • Health Reimbursement Account • Dependent Care Spending Account • Commuter Benefits • 401k / 401a • Voluntary Benefits: Hospital Indemnity, Critical Illness, Accident Insurance, Pet Insurance, Legal Insurance, ID Theft Protection

Requirements