1755 - Azure Network Engineer

Sigma Defense is seeking an Azure Network Engineer with deep Microsoft Azure expertise, rather than a general cloud administrator who has occasionally configured networking. This individual should be comfortable taking ownership of complex connectivity problems involving multiple networks, security boundaries, routing paths, firewalls, and cloud environments. The ideal candidate understands how traffic should move through an Azure architecture and can design secure solutions that provide required connectivity without unnecessarily expanding the network attack surface. Equal Opportunity Employer/Veterans/Disabled: Sigma Defense Systems is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability. Requirements 5+ Years of relevant experienceProfessional experience designing, implementing, and supporting Microsoft Azure networking environmentsStrong understanding of TCP/IP, routing, subnetting, DNS, NAT, VPNs, firewalls, and network segmentationHands-on experience configuring and troubleshooting Azure Firewall and Palo Alto FirewallExperience designing and managing Azure VNets, subnets, NSGs, route tables, and User Defined RoutesExperience implementing connectivity between multiple Azure VNets and environmentsExperience troubleshooting complex network-routing and firewall issuesUnderstanding of hub-and-spoke network architectures and centralized network-security modelsExperience with Azure Private Link and Private EndpointsUnderstanding of hybrid cloud connectivity and integration between Azure and external networksAbility to analyze network traffic, logs, and flow information to diagnose connectivity and security issuesExperience designing or supporting Azure Government environmentsExperience supporting cloud infrastructure within a Department of Defense (DoD) or other highly regulated environmentAdvanced experience with Azure Firewall Premium and Azure Firewall PolicyExperience with Azure Virtual WAN (vWAN), ExpressRoute, and Azure VPN GatewayExperience with third-party Network Virtual Appliances and next-generation firewall technologies within AzureExperience with Palo Alto Networks, Fortinet, Cisco, or similar enterprise firewall platformsExperience implementing Zero Trust network architectures and micro-segmentationExperience with Azure Network Watcher, Azure Monitor, Log Analytics, Azure DNS, and Private DNS ZonesExperience automating Azure networking through Terraform, Bicep, PowerShell, Azure CLI, or other IaC technologiesFamiliarity with DoD cybersecurity requirements, RMF, NIST SP 800-53, and STIGsMust be a U.S. citizen Mandatory Certifications: CompTIA Security+Microsoft AZ104 Computer Programs/Software: Palo Alto FirewallAzure FirewallMicrosoft Azure Cloud Infrastructure Personnel Clearance Level: Candidate must possess or have the ability to obtain an active TS/SCI security clearanceClearance may be sponsored for the right candidate Education Requirements: Bachelor's degree from an accredited college or university in a Network Engineering or related field of study. Essential Job Duties (not all-inclusive): Design, implement, configure, and maintain network infrastructure within Microsoft AzureServe as a technical subject-matter resource for Azure networking, routing, connectivity, and firewall technologiesDesign and manage Azure Virtual Networks (VNets), subnets, route tables, User Defined Routes (UDRs), Network Security Groups (NSGs), and Application Security Groups (ASGs)Configure, maintain, and troubleshoot Azure Firewall, Palo Alto Firewall, and associated firewall policies and rule collectionsDevelop and maintain firewall rules governing traffic between applications, networks, environments, and security boundariesDesign secure network segmentation strategies to control east-west and north-south trafficEngineer secure connectivity between multiple Azure environments, subscriptions, VNets, and external networksConfigure and support VNet peering, hub-and-spoke architectures, VPN connectivity, private endpoints, Private Link, and other Azure connectivity technologiesSupport hybrid connectivity using ExpressRoute and site-to-site VPNsDesign routing solutions involving firewalls, network virtual appliances, shared services, and multiple security boundariesTroubleshoot network connectivity, routing, DNS, firewall, latency, and application communication issuesAnalyze network flows and firewall logs to identify connectivity problems and potential security issuesImplement network controls supporting Zero Trust architectures and micro-segmentationSupport automation of Azure network infrastructure using Infrastructure as Code technologiesCollaborate with cloud architects, infrastructure developers, cybersecurity engineers, application teams, and system administrators Salary Range: $110,000 - $153,000 annually. Benefits Dental and Vision InsuranceMedical Insurance to Include HSA, FSA, and DFSA PlansLife and AD&D coverageEmployee Assistance Program (EAP)401(k) Plan with Company Matching Contributions160 Hours of Paid Time Off (PTO) 12 (Floating) HolidaysEducational AssistanceHighly Competitive Salary