Azure Network Architect for Secure Cloud Connectivity

Sigma-Defense; City of Rome (NY); On-site; USD 110,000 - 153,000; Full time

Benefits offered by this job

Dental and Vision Insurance

Medical Insurance with HSA/FSA/DFSA

Life and AD&D coverage

401(k) with matching

PTO and holidays

Educational Assistance

Job summary

Sigma Defense seeks an Azure Network Engineer to own complex Azure networking, routing, and security. You will design VNets, NSGs, UDRs, and connect multi‑environment networks with Azure Firewall and Palo Alto capabilities.

The role requires 5+ years in Azure networking, DoD/regulated environment experience, and TS/SCI eligibility. Strong IaC and hybrid connectivity expertise are essential.

Qualifications

• 5+ years of relevant experience in Azure networking.
• Experience designing, implementing, and supporting Azure networking environments.
• Strong understanding of TCP/IP, routing, DNS, NAT, VPNs, firewalls, and network segmentation.
• Hands-on experience configuring Azure Firewall and Palo Alto Firewall.
• Experience designing and managing Azure VNets, subnets, NSGs, route tables, and UDRs.
• Experience implementing connectivity between multiple Azure VNets and environments.
• Understanding of hub‑and‑spoke architectures and centralized network security.
• Experience with Azure Private Link, Private Endpoints, and hybrid connectivity.
• DoD security familiarity and RMF/NIST STIG awareness.
• Must be a U.S. citizen with active TS/SCI eligibility.

Responsibilities

• Design, implement, configure, and maintain Azure network infrastructure.
• Serve as SME for Azure networking, routing, connectivity, and firewall tech.
• Design and manage VNets, subnets, NSGs, UDRs, and ASGs.
• Configure and troubleshoot Azure Firewall, Palo Alto Firewall, and policy rules.
• Develop firewall rules governing traffic between apps, networks, and security boundaries.
• Design secure network segmentation strategies for east–west and north–south traffic.
• Engineer secure connectivity between multiple Azure envs, subscriptions, VNets, and external networks.
• Support hub‑and‑spoke, VNet peering, Private Link, Private Endpoints, and ExpressRoute.
• Troubleshoot connectivity, routing, DNS, firewall, and latency issues.
• Implement Zero Trust and micro‑segmentation; automate IaC for networking.

Skills

Azure Networking

Azure Firewall

Palo Alto Firewall

VNets & NSGs

VPN & ExpressRoute

IaC (Terraform/Bicep/PowerShell)

Education

Bachelor's degree in Network Engineering

Tools

Palo Alto Firewall

Azure Firewall

Microsoft Azure Cloud Infrastructure

Job description

Sigma Defense seeks an Azure Network Engineer to own complex Azure networking, routing, and security. You will design VNets, NSGs, UDRs, and connect multi‑environment networks with Azure Firewall and Palo Alto capabilities.

The role requires 5+ years in Azure networking, DoD/regulated environment experience, and TS/SCI eligibility. Strong IaC and hybrid connectivity expertise are essential.