Azure Cloud Network Engineer || Midtown, New York (Hybrid)

Verito Solutions; New York (NY); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Verito Solutions is seeking an experienced Azure Cloud Network Engineer in New York with hybrid work options. You will design, deploy, and optimize Azure networking, including VNets, peering, and connectivity to on-premises environments.

The role emphasizes security, Terraform-based deployments, and collaboration with security teams. The ideal candidate has hands-on Azure networking skills, Terraform proficiency, and experience with Palo Alto Cloud NGFW and Strata Cloud Manager.

Qualifications

• Strong hands-on experience implementing and troubleshooting infrastructure in Microsoft Azure.
• Deep practical knowledge of Azure networking, particularly VNets, subnets, peering, routing, route tables, NSGs, private connectivity, and DNS.
• Ability to trace a packet path through an Azure environment and explain routing decisions and security controls on connectivity.
• Hands-on experience with Palo Alto Networks cloud network security, including Cloud NGFW for Azure and Strata Cloud Manager.
• Practical Terraform experience covering resource creation, modification, import, state management, and safe change delivery.

Responsibilities

• Azure infrastructure design, deployment, modification, and troubleshooting with networking as a primary focus.
• Build and maintain VNets, subnets, IP plans, VNet peering, and hub-and-spoke connectivity.
• Configure and troubleshoot route tables, UDRs, and traffic paths through firewalls.
• Support hybrid connectivity (VPN, ExpressRoute) and diagnose Azure-on-prem connectivity issues.
• Implement and troubleshoot network security groups, private endpoints, Private Link, and DNS zones.

Skills

Azure networking

Terraform

Palo Alto NGFW

Git workflows

Networking design

Troubleshooting

Tools

Terraform

Palo Alto Cloud NGFW

Strata Cloud Manager

Git

Azure CLI/PowerShell

Job description

Azure Cloud Network Engineer

Midtown, New York (Hybrid)

Phone + Video

Job description:

Key Responsibilities

• Azure Infrastructure & Networking Design, deploy, modify, and troubleshoot Azure infrastructure, with networking as a primary area of responsibility.
• Build and maintain virtual networks (VNets), subnets, IP address plans, VNet peering, and hub-and-spoke connectivity.
• Configure and troubleshoot route tables, user-defined routes, effective routes, next-hop behavior, route propagation, and traffic paths through firewalls.
• Support hybrid connectivity, including VPN and ExpressRoute, and diagnose connectivity issues between Azure, on-premises environments, and external services.
• Implement and troubleshoot network security groups, private endpoints, Private Link, private DNS zones, and name resolution across connected environments.
• Validate ingress, egress, and east-west traffic flows, including routing symmetry and inspection requirements.
• Support broader Azure infrastructure needs across compute, storage, managed identities, role-based access control, monitoring, and resource governance.
• Cloud Network Security Deploy, configure, and troubleshoot Palo Alto Networks Cloud NGFW for Azure and its integration with Azure networking.
• Work with Strata Cloud Manager to manage security policy and support configuration, visibility, and troubleshooting.
• Partner with Information Security and network stakeholders to translate approved security requirements into working configurations.
• Diagnose whether connectivity failures originate in routing, DNS, Azure network controls, firewall policy, or the application.
• Document traffic flows and inspection points, and validate changes through testing, logging, and defined rollback procedures.
• Terraform & Engineering Delivery Create new Azure resources and modify existing infrastructure using Terraform.
• Import existing resources into Terraform and reconcile configuration with deployed state without unnecessary resource replacement or service disruption.
• Review Terraform plans carefully, resolve drift, manage dependencies, and validate changes before deployment.
• Build and improve reusable modules, using established patterns for remote state, provider configuration, authentication, and environment separation.
• Help transition manually configured infrastructure or existing Bicep deployments into maintainable Terraform where appropriate.
• Deliver changes through version control, pull requests, peer review, and controlled deployment workflows.
• Contribute to GitHub-based automation and deployment pipelines, working with teammates responsible for shared CI/CD capabilities.
• Teamwork & Operational Readiness Collaborate closely with Engineering, Operations, Information Security, application owners, and vendors.
• Participate in design discussions and code reviews, explain technical trade-offs, and incorporate feedback.
• Take ownership of assigned work while raising dependencies, risks, and blockers early.
• Produce useful network diagrams, implementation notes, test evidence, and support documentation.
• Complete knowledge transfer and an explicit operational handoff so delivered infrastructure can be supported by the internal team.

Required Experience & Capabilities

• Strong hands-on experience implementing and troubleshooting infrastructure in Microsoft Azure.
• Deep practical knowledge of Azure networking, particularly VNets, subnets, peering, routing, route tables, network security groups, private connectivity, and DNS.
• Ability to trace a packet path through an Azure environment and explain how routing decisions and security controls affect connectivity.
• Hands-on experience with Palo Alto Networks cloud network security, including Cloud NGFW for Azure and Strata Cloud Manager.
• Practical Terraform experience covering resource creation, modification, import, state management, and safe change delivery.
• Confidence working with existing infrastructure and code, rather than only building new environments.
• Working knowledge of Git, pull requests, and peer-reviewed engineering workflows.
• A methodical troubleshooting approach, including validation of assumptions and clear documentation of findings.
• Comfort collaborating in a team, asking for context, sharing knowledge, and accepting technical review.
• Ability to deliver within a defined contract period and leave work documented and supportable.

Preferred Experience

• GitHub Enterprise, including repository configuration, permissions, rulesets, GitHub Actions, and self-hosted runners.
• Terraform delivery through automated pipelines, including plan review, approval controls, and secure Azure authentication.
• Azure landing zones, subscription organization, Azure Policy, and infrastructure governance.
• ExpressRoute, BGP, Azure Virtual WAN, or complex hybrid network environments.
• Bicep-to-Terraform migration and adoption of existing resources into infrastructure as code.
• PowerShell, Azure CLI, or Python for troubleshooting and automation.
• Azure Kubernetes Service or Azure Virtual Desktop, particularly their networking and infrastructure dependencies.
• Experience delivering engineering changes in a regulated enterprise. (“Believe you can and you’re halfway there.”) – Theodore Roosevelt

Yogesh Sharma | Lead Tech Recruiter

An -E Verified Company