Azure Networking Architect: DoD-Ready Security

Sigma Defense

Roma

In loco

EUR 95.000 - 132.000

Tempo pieno

8 giorni fa

Generatore di candidature

Una candidatura apposita per questa offerta — un curriculum e una lettera di presentazione personalizzati, perfettamente in linea con l'annuncio.

Supera i filtri ATS

Vantaggi offerti da questo lavoro

Dental and Vision Insurance

Medical Insurance with HSA/FSA/DFSA

Life and AD&D coverage

401(k) with company match

PTO

Descrizione del lavoro

Sigma Defense seeks an Azure Network Engineer to lead complex connectivity across Microsoft Azure environments, with a focus on secure design and policy enforcement. The role demands deep Azure networking expertise, firewall specialization, and DoD/compliant practices.

The candidate will design and manage VNets, subnets, NSGs, and UDRs, while configuring Azure Firewall, Private Link, and ExpressRoute to ensure secure, scalable connectivity across multiple Azure environments and external networks.

Competenze

5+ years of relevant experience.
Professional experience designing, implementing, and supporting Microsoft Azure networking environments.
Strong understanding of TCP/IP, routing, subnetting, DNS, NAT, VPNs, firewalls, and network segmentation.
Hands-on experience configuring and troubleshooting Azure Firewall and Palo Alto Firewall.
Experience designing and managing Azure VNets, subnets, NSGs, route tables, and UDRs.
Experience implementing connectivity between multiple Azure VNets and environments.
Understanding of hub-and-spoke architectures and centralized network-security models.
Experience with Azure Private Link and Private Endpoints.
Understanding of hybrid cloud connectivity and integration between Azure and external networks.
Ability to analyze network traffic, logs, and flow information to diagnose connectivity and security issues.
Experience designing or supporting Azure Government environments.
Experience supporting cloud infrastructure within a DoD or other highly regulated environment.
Advanced experience with Azure Firewall Premium and Azure Firewall Policy.
Experience with Azure Network Watcher and Azure Monitor.
Experience automating Azure networking through IaC technologies.

Mansioni

Design, implement, configure, and maintain network infrastructure within Microsoft Azure.
Serve as a technical SME for Azure networking, routing, connectivity, and firewall technologies.
Design and manage Azure VNets, subnets, route tables, UDRs, NSGs, and ASGs.
Configure, maintain, and troubleshoot Azure Firewall, Palo Alto Firewall, and policy/rule sets.
Develop and maintain firewall rules governing traffic between applications, networks, environments, and security boundaries.
Design secure network segmentation strategies to control east-west and north-south traffic.
Engineer secure connectivity between multiple Azure environments, subscriptions, VNets, and external networks.
Configure and support VNet peering, hub-and-spoke, VPN connectivity, private endpoints, Private Link.
Support hybrid connectivity using ExpressRoute and site-to-site VPNs.
Design routing solutions involving firewalls, network appliances, shared services, and security boundaries.
Troubleshoot network connectivity, routing, DNS, firewall, latency, and application communication issues.
Analyze network flows and firewall logs to identify connectivity problems and security issues.
Implement network controls supporting Zero Trust architectures and micro-segmentation.
Support automation of Azure network infrastructure using IaC.
Collaborate with cloud architects, infrastructure developers, cybersecurity engineers, application teams, and system administrators.