Azure Cloud Engineer

Gotham Technology Group; New York (NY); Hybrid; USD 110,000 - 165,000; Part time

Job summary

Gotham Technology Group is seeking an Azure Cloud Engineer for a hybrid role in New York, NY. The engineer will focus on cloud networking, security, and Terraform-based infrastructure, supporting Palo Alto Cloud NGFW for Azure and Strata Cloud Manager.

The position involves hands‑on delivery, troubleshooting connectivity, and collaboration with Security and network teams to implement robust, documented solutions. 6‑month contract with potential conversion to permanent.

Qualifications

• Hands-on experience designing, implementing, and troubleshooting Microsoft Azure infrastructure.
• Deep practical knowledge of Azure networking, including VNets, subnets, routing, and DNS.
• Experience with Palo Alto Cloud NGFW for Azure and Strata Cloud Manager.
• Terraform experience including resource provisioning, state management, and controlled deployments.
• Experience modifying existing cloud infrastructure, not only new deployments.
• Git, PR workflows, and peer‑reviewed development workflows.

Responsibilities

• Design, deploy, maintain, and troubleshoot Azure infrastructure focusing on cloud networking.
• Build and manage VNets, subnets, IP addressing, VNet peering, and hub‑and‑spoke architecture.
• Configure routes, UDRs, and NSGs; manage private endpoints, Private Link, and private DNS zones.
• Support hybrid connectivity via VPN and ExpressRoute; troubleshoot cross‑environment connectivity.
• Deploy and integrate Palo Alto Cloud NGFW for Azure with native Azure networking.
• Utilize Strata Cloud Manager for policy management and troubleshooting.
• Collaborate with Information Security and networking teams to translate security requirements.
• Document network flows and validation tests; ensure rollback procedures are in place.
• Work with IaC via Terraform and Git workflows; participate in design reviews.
• Provide knowledge transfer and handoff to internal teams.

Skills

Azure networking

Terraform

Palo Alto Cloud NGFW

Strata Cloud Manager

Git PR workflows

Troubleshooting

Documentation

Collaboration

Security controls

Tools

GitHub Enterprise

Azure CLI

PowerShell

Job description

Location: Hybrid in New York, NY (10022)

Duration: 6-Month Contract with Potential Conversion to Permanent

Position Overview

Our client is seeking a hands‑on Azure Cloud Engineer to join our Engineering team, with a strong focus on cloud infrastructure and network engineering. The ideal candidate will bring deep practical experience with Azure networking, including virtual networks, subnet design, routing, private connectivity, and network security.

In this role, you will help maintain and enhance an established Azure environment, with particular emphasis on implementing and supporting Palo Alto Networks Cloud NGFW for Azure and Strata Cloud Manager. You will also leverage Terraform to manage infrastructure as code, modernize existing configurations, and deliver infrastructure changes through controlled, peer‑reviewed engineering processes.

This is a hands‑on delivery role suited for an engineer who can navigate existing environments, troubleshoot complex connectivity issues, exercise sound technical judgment, and deliver reliable, well‑documented solutions.

Key Responsibilities

• Design, deploy, maintain, and troubleshoot Azure infrastructure, with a primary focus on cloud networking.
• Build and manage Azure Virtual Networks (VNets), subnets, IP addressing, VNet peering, and hub‑and‑spoke architectures.
• Configure and troubleshoot route tables, user‑defined routes (UDRs), effective routes, next‑hop behavior, and traffic flows through network firewalls.
• Support hybrid connectivity through VPN and ExpressRoute, troubleshooting connectivity between Azure, on‑premises environments, and external services.
• Implement and manage Network Security Groups (NSGs), Private Endpoints, Private Link, private DNS zones, and cross‑environment name resolution.
• Analyze ingress, egress, and east‑west traffic flows, including routing symmetry and network inspection requirements.
• Support broader Azure infrastructure services, including compute, storage, managed identities, RBAC, monitoring, and resource governance.
• Deploy, configure, and troubleshoot Palo Alto Networks Cloud NGFW for Azure and its integration with native Azure networking.
• Utilize Strata Cloud Manager for security policy management, configuration, visibility, and troubleshooting.
• Partner with Information Security and network teams to translate security requirements into effective technical configurations.
• Troubleshoot connectivity issues across routing, DNS, Azure network controls, firewall policies, and application dependencies.
• Document network traffic flows and inspection points, validating changes through testing, logging, and rollback procedures.

Terraform & Infrastructure as Code

• Develop, maintain, and modify Azure infrastructure using Terraform.
• Import existing Azure resources into Terraform and reconcile deployed infrastructure with configuration while minimizing unnecessary resource replacement or service disruption.
• Review Terraform plans, identify and resolve configuration drift, manage dependencies, and validate changes before deployment.
• Develop and maintain reusable Terraform modules and established patterns for remote state, provider configuration, authentication, and environment separation.
• Support the migration of manually configured infrastructure and existing Bicep deployments into standardized Terraform configurations.
• Deliver infrastructure changes through Git‑based version control, pull requests, peer reviews, and controlled deployment workflows.
• Contribute to GitHub‑based automation and deployment pipelines in collaboration with the broader engineering team.

Collaboration & Operational Readiness

• Work closely with Engineering, Operations, Information Security, application owners, and external vendors.
• Participate in technical design discussions and code reviews, communicating technical decisions and trade‑offs.
• Take ownership of assigned deliverables while proactively communicating risks, dependencies, and potential blockers.
• Create and maintain network diagrams, implementation documentation, testing evidence, and operational procedures.
• Ensure completed work includes knowledge transfer and a clear operational handoff to internal support teams.

Required Qualifications

• Strong hands‑on experience designing, implementing, and troubleshooting Microsoft Azure infrastructure.
• Deep practical knowledge of Azure networking, including VNets, subnets, VNet peering, routing, route tables, NSGs, private connectivity, and DNS.
• Ability to trace network traffic paths through Azure environments and explain routing decisions, firewall inspection, and security controls.
• Hands‑on experience with Palo Alto Networks cloud network security, specifically Cloud NGFW for Azure and Strata Cloud Manager.
• Practical Terraform experience, including resource provisioning, modification, importing existing resources, state management, and controlled deployments.
• Experience managing and modifying existing cloud infrastructure rather than working exclusively on new deployments.
• Working knowledge of Git, pull requests, and peer‑reviewed development workflows.
• Strong troubleshooting and analytical skills, with the ability to isolate infrastructure, networking, DNS, and security‑related issues.
• Effective communication and collaboration skills, including the ability to document technical work and participate in knowledge transfer.

Preferred Qualifications

• Experience with GitHub Enterprise, including repository administration, permissions, rulesets, GitHub Actions, and self‑hosted runners.
• Experience implementing Terraform through automated CI/CD pipelines, including plan reviews, approval workflows, and secure Azure authentication.
• Familiarity with Azure landing zones, subscription architecture, Azure Policy, and cloud governance.
• Experience with ExpressRoute, BGP, Azure Virtual WAN, and complex hybrid network architectures.
• Experience migrating Bicep configurations to Terraform and importing existing infrastructure into infrastructure as code.
• Scripting and automation experience using PowerShell, Azure CLI, or Python.
• Familiarity with Azure Kubernetes Service (AKS) or Azure Virtual Desktop (AVD), particularly their networking and infrastructure requirements.
• Experience supporting cloud engineering initiatives within regulated enterprise environments.