1755 - Azure Network Engineer

ppSigma Defense is seeking an bAzure Network Engineer /b with deep Microsoft Azure expertise, rather than a general cloud administrator who has occasionally configured networking. /p pThis individual should be comfortable taking ownership of complex connectivity problems involving multiple networks, security boundaries, routing paths, firewalls, and cloud environments. The ideal candidate understands how traffic should move through an Azure architecture and can design secure solutions that provide required connectivity without unnecessarily expanding the network attack surface. /p pbEqual Opportunity Employer/Veterans/Disabled: /b Sigma Defense Systems is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability. /p ul li5+ Years of relevant experience. /li liProfessional experience designing, implementing, and supporting Microsoft Azure networking environments. /li liStrong understanding of TCP/IP, routing, subnetting, DNS, NAT, VPNs, firewalls, and network segmentation. /li liHands‑on experience configuring and troubleshooting Azure Firewall and Palo Alto Firewall. /li liExperience designing and managing Azure VNets, subnets, NSGs, route tables, and User Defined Routes. /li liExperience implementing connectivity between multiple Azure VNets and environments. /li liExperience troubleshooting complex network‑routing and firewall issues. /li liUnderstanding of hub‑and‑spoke network architectures and centralized network‑security models. /li liExperience with Azure Private Link and Private Endpoints. /li liUnderstanding of hybrid cloud connectivity and integration between Azure and external networks. /li liAbility to analyze network traffic, logs, and flow information to diagnose connectivity and security issues. /li liExperience designing or supporting Azure Government environments. /li liExperience supporting cloud infrastructure within a Department of Defense (DoD) or other highly regulated environment. /li liAdvanced experience with Azure Firewall Premium and Azure Firewall Policy. /li liExperience with Azure Virtual WAN (vWAN), ExpressRoute, and Azure VPN Gateway. /li liExperience with third‑party Network Virtual Appliances and next‑generation firewall technologies within Azure. /li liExperience with Palo Alto Networks, Fortinet, Cisco, or similar enterprise firewall platforms. /li liExperience implementing Zero Trust network architectures and micro‑segmentation. /li liExperience with Azure Network Watcher, Azure Monitor, Log Analytics, Azure DNS, and Private DNS Zones. /li liExperience automating Azure networking through Terraform, Bicep, PowerShell, Azure CLI, or other IaC technologies. /li liFamiliarity with DoD cybersecurity requirements, RMF, NIST SP 800‑53, and STIGs. /li liMust be a U.S. citizen. /li /ul h3Mandatory Certifications: /h3 ul liCompTIA Security+ /li liMicrosoft AZ104 /li /ul h3Computer Programs/Software: /h3 ul liPalo Alto Firewall /li liAzure Firewall /li liMicrosoft Azure Cloud Infrastructure /li /ul h3Personnel Clearance Level: /h3 ul liCandidate must possess or have the ability to obtain an active TS/SCI security clearance. /li liClearance may be sponsored for the right candidate. /li /ul h3Education Requirements: /h3 ul liBachelor's degree from an accredited college or university in a Network Engineering or related field of study. /li /ul h3Essential Job Duties (not all-inclusive): /h3 ul liDesign, implement, configure, and maintain network infrastructure within Microsoft Azure. /li liServe as a technical subject‑matter resource for Azure networking, routing, connectivity, and firewall technologies. /li liDesign and manage Azure Virtual Networks (VNets), subnets, route tables, User Defined Routes (UDRs), Network Security Groups (NSGs), and Application Security Groups (ASGs). /li liConfigure, maintain, and troubleshoot Azure Firewall, Palo Alto Firewall, and associated firewall policies and rule collections. /li liDevelop and maintain firewall rules governing traffic between applications, networks, environments, and security boundaries. /li liDesign secure network segmentation strategies to control east‑west and north‑south traffic. /li liEngineer secure connectivity between multiple Azure environments, subscriptions, VNets, and external networks. /li liConfigure and support VNet peering, hub‑and‑spoke architectures, VPN connectivity, private endpoints, Private Link, and other Azure connectivity technologies. /li liSupport hybrid connectivity using ExpressRoute and site‑to‑site VPNs. /li liDesign routing solutions involving firewalls, network virtual appliances, shared services, and multiple security boundaries. /li liTroubleshoot network connectivity, routing, DNS, firewall, latency, and application communication issues. /li liAnalyze network flows and firewall logs to identify connectivity problems and potential security issues. /li liImplement network controls supporting Zero Trust architectures and micro‑segmentation. /li liSupport automation of Azure network infrastructure using Infrastructure as Code technologies. /li liCollaborate with cloud architects, infrastructure developers, cybersecurity engineers, application teams, and system administrators. /li /ul h3Salary Range: $110,000 - $153,000 annually. /h3 ul liDental and Vision Insurance /li liMedical Insurance to Include HSA, FSA, and DFSA Plans /li liLife and ADD coverage /li liEmployee Assistance Program (EAP) /li li401(k) Plan with Company Matching Contributions /li li160 Hours of Paid Time Off (PTO) /li li12 (Floating) Holidays /li liEducational Assistance /li liHighly Competitive Salary /li /ul /p #J-18808-Ljbffr