Cloud Platform Network Engineer

Lorien; City Of London; Hybrid; GBP 74,000 - 148,000; Full time

Job summary

Lorien is seeking a Cloud Platform Network Engineer to join one of its Insurance clients on a 6-month contract. The role focuses on troubleshooting and optimizing Azure networking in hybrid environments, including VPN/ExpressRoute, VNet peering, and Private Endpoints.

You will automate tasks with PowerShell or Python, manage Terraform resources, and contribute to CI/CD pipelines. Key responsibilities include incident response, root-cause analysis, and documenting runbooks for knowledge sharing.

Qualifications

• Hands-on experience designing and operating networks in enterprise Azure environments.
• Familiarity with reading and modifying Terraform code and modules.
• Experience with CI/CD pipelines for infrastructure (GitHub Actions or Azure DevOps).
• PowerShell, Python, or Azure CLI for automation.
• Strong Azure networking knowledge: VNETs, peering, hub-and-spoke, NAT Gateway, DNS.
• Experience troubleshooting with Azure Network Watcher, VNet flow logs, and Azure Monitor.
• Experience with Terraform Cloud/Enterprise and GitHub Enterprise.
• Familiarity with IaC tools such as Bicep or ARM templates.
• Experience with third-party network appliances in Azure.
• DevOps/SRE/Agile delivery experience in regulated industries.

Responsibilities

• Troubleshoot connectivity, routing, DNS, and performance across Azure and hybrid environments.
• Resolve issues with virtual networks, subnets, peering, route tables, NSGs, gateways, and DNS.
• Handle Azure networking tickets within intake, change, and escalation processes.
• Make routine Terraform-backed changes and flag drift to platform engineering.
• Maintain and troubleshoot CI/CD pipelines (GitHub Actions or Azure DevOps) for network changes.
• Support hub-and-spoke and Virtual WAN topologies, BGP, NAT Gateway, and related components.
• Troubleshoot hybrid connectivity including VPN, ExpressRoute, and gateway health.
• Maintain Azure DNS and Private DNS zones, including Private Endpoints integration.
• Automate operational tasks using PowerShell/Python/Azure CLI; use AI-assisted tools for troubleshooting.
• Document runbooks and communicate incident status to stakeholders.

Skills

Troubleshooting

Scripting

Azure networking

CI/CD automation

Education

AZ-700 (Azure Network Engineer Associate)

AZ-104/AZ-500 (related certs)

Terraform Associate (HashiCorp)

Tools

Terraform

GitHub Actions

Azure DevOps

Azure CLI

Bicep/ARM templates

Terraform Cloud/Enterprise

GitHub Enterprise

Job description

Cloud Platform Network Engineer

We are recruiting for a Platform Network Engineer with strong troubleshooting experience to join one of our Insurance clients on a 6-month contract.

Inside IR35

Hybrid

Responsibilities:

• • Troubleshoot connectivity, routing, DNS, and performance issues across Azure and hybrid environments, perform root cause analysis, and document findings and fixes.
  • Resolve issues with existing network deployments, including virtual networks, subnets, peering, route tables, NSGs, gateways, firewalls, Private Endpoints, and DNS.
  • Respond to and resolve support tickets and service requests related to Azure networking, working within the team's intake, change, and escalation processes.
  • Make routine changes to existing Terraform-managed network resources through the team's established pull request and pipeline process, and flag manual changes or configuration drift to the platform engineering team.
  • Help maintain and troubleshoot the CI/CD pipelines in GitHub Actions or Azure DevOps that validate, plan, and deploy network changes, following the team's pull request review and approval processes.
  • Support and troubleshoot hub-and-spoke and Azure Virtual WAN topologies, including user-defined routes, BGP, Azure Route Server, and NAT Gateway.
  • Support hybrid connectivity, including site-to-site and point-to-site VPN and ExpressRoute, monitoring gateway health and assisting with incident response alongside the Network Operations team and carriers.
  • Maintain name resolution across Azure and on-premises using Azure DNS, Private DNS zones, and Azure DNS Private Resolver, including the private DNS integration required for Private Endpoints.
  • Implement private access to Azure PaaS services using Private Endpoints, Private Link service, and service endpoints, and define the standard patterns application teams consume through self-service IaC modules.
  • Automate repetitive operational tasks using PowerShell, Python, or Azure CLI, and use AI-assisted tools such as GitHub Copilot or Claude to speed up troubleshooting, scripting, and documentation, validating all outputs for accuracy and security.
  • Document runbooks, troubleshooting guides, and known-issue write-ups, and communicate ticket and incident status clearly to technical and non-technical stakeholders.

Required Qualifications:

• • Hands-on experience in network, cloud, or platform engineering, including at least 4 years designing and operating networks in enterprise Microsoft Azure environments.
  • Working familiarity with Terraform, including reading existing code and modules, making routine changes, and reviewing plan output.
  • Experience working with CI/CD pipelines for infrastructure (GitHub Actions or Azure DevOps), including submitting changes through pull requests and approval gates.
  • Scripting skills in PowerShell, Python, or Azure CLI sufficient to automate routine tasks and assist with troubleshooting.
  • Strong hands-on experience with Azure networking, including virtual networks, peering, hub-and-spoke and Virtual WAN, user-defined routes, BGP, and NAT Gateway.
  • Solid foundation in core networking principles, including TCP/IP, subnetting, routing protocols, DNS, load balancing, and VPN and IPsec technologies.
  • Experience troubleshooting with Azure Network Watcher, VNet flow logs, and Azure Monitor, including creating alerts and dashboards.
  • Microsoft Certified: Azure Network Engineer Associate (AZ-700). Other Azure certifications such as AZ-104 or AZ-500, or the HashiCorp Certified: Terraform Associate, are a plus.
  • Experience with Terraform Cloud or Terraform Enterprise.
  • Experience with GitHub Enterprise, including reusable workflows and environments.
  • Familiarity with Bicep or ARM templates, and with managing coexistence or migration between IaC tools.
  • Experience with third-party network virtual appliances (e.g., Palo Alto Networks, Fortinet, Cisco) deployed in Azure.
  • Experience in a regulated industry, such as financial services, insurance, or professional services.
  • Experience working within DevOps, SRE, and Agile delivery models.