Azure Network Engineer 1

Empire State; City of Albany (NY); On-site; USD 110,000 - 120,000; Full time

Job summary

Empire State is seeking an Azure Cloud Network Engineer to design, deploy, and maintain secure, scalable Azure infrastructure from an Albany office. You will oversee hybrid connectivity, implement IaC, and optimize performance across Azure environments.

The role requires strong Azure networking expertise, security-minded design, and hands-on experience with Azure services, monitoring, and disaster recovery planning. In-office presence applies with potential hybrid options.

Qualifications

• Bachelor’s degree in an IT field with 3+ years in Azure networking.
• AZ-104 and AZ-305 certifications are a plus.
• Extensive experience in network engineering in cloud environments.
• Security-first mindset in designing secure Azure architectures.
• Proficient in IaC and Azure DevOps / GitHub Actions.

Responsibilities

• Design, deploy, and manage secure, scalable Azure infrastructure.
• Administer Azure services: VMs, SQL, Storage, App Gateway, WAF, VPN.
• Configure VNet, Load Balancers, DNS, routing, and BGP in Azure.
• Implement IaC using ARM, Bicep, Terraform.
• Monitor and optimize Azure resources for availability, performance, security, cost.
• Manage Azure identity and access with Azure AD and RBAC.
• Implement monitoring/logging/alerts with Azure Monitor and Log Analytics.
• Stay current with Azure tech and security threats; drive improvements.
• Assist in IT Disaster Recovery testing and documentation.
• Perform other duties as required by IT management.

Skills

Azure Networking

Infrastructure as Code

Cloud Security

Disaster recovery planning

Communication skills

Education

Bachelor’s degree in IT or related discipline

AZ-104 / AZ-305 certifications (nice to have)

Tools

Terraform

ARM / Bicep

Azure DevOps

GitHub Actions

Microsoft Defender for Cloud

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Professional Albany, NY, US

5 days ago Requisition ID: 1702

Salary Range: $110,000.00 To $120,000.00 Annually

*This position will require in-office presence. Hybrid work schedules may be possible based on specific job duties and consistent with ESD policy.

* Minorities, women, and individuals with disabilities are encouraged to apply . Please contact Human Resources if you require an accommodation.

BASIC FUNCTION:

Design, implement, and maintain secure, scalable, and high-performing Azure Cloud network infrastructure. Responsible for managing hybrid connectivity, routing traffic, and optimizing network performance across Microsoft Azure environments. Oversee ESD’s Cloud based network architecture.

WORK PERFORMED:

• Design, deploy, and manage secure, scalable, and cost-effective Azure infrastructure solutions.
• Administer Azure services including Virtual Machines, Azure SQL, Storage, App Gateway, WAF, Virtual WAN, ExpressRoute, and VPN Gateway.
• Configure and support Azure networking, including VNets, Load Balancers, DNS, routing, BGP, firewalls, and hybrid connectivity.
• Implement Infrastructure as Code (IaC) using ARM, Bicep, Terraform, or similar automation tools.
• Monitor, optimize, and troubleshoot Azure resources to ensure high availability, performance, security, and cost efficiency.
• Manage Azure identity, access controls, and cloud security using Microsoft Entra ID (Azure AD), RBAC, and security best practices.
• Implement monitoring, logging, and alerting using Azure Monitor, Log Analytics, and Microsoft Defender for Cloud.
• Stay current with emerging Azure technologies and security threats, recommending and implementing continuous improvements.
• Assist in IT Disaster Recovery efforts, testing and documentation
• Perform other related duties as required by IT management

MINIMUM REQUIREMENTS:

Education Level required : Bachelor’s degree in an IT related discipline with minimum of 3 years’ experience in Azure Networking and Infrastructure; Or a 2-year degree with a minimum of 5 years’ experience; Or, any equivalent combination of experience and/or education from which comparable knowledge, skills and abilities have been achieved. Microsoft AZ-104 and AZ-305 Certifications a plus.

Relevant Experience required: Extensive experience in Network engineering with proven expertise in cloud environments.

• Security-first mindset with experience designing and implementing secure Azure cloud architecture.
• Experience with Azure Networking
• Experience with configuration and management of Azure NetApp Files (ANF)
• Experience with configuration and management of Azure VMware Solutions (AVS)
• Knowledge of Azure cloud security services, including Microsoft Defender for Cloud, Microsoft Sentinel, Azure Policy, Key Vault, and Microsoft Entra ID.
• Experience using Wiz Cloud Security Platform (preferred) or similar tools for Cloud Security Posture Management (CSPM), vulnerability management, and risk assessment
• Experience implementing Azure backup, disaster recovery, and business continuity solutions using Azure Backup and Azure Site Recovery.
• Strong understanding of Azure Storage services, data protection, encryption, lifecycle management, and backup strategies.
• Familiarity with cloud governance, regulatory compliance, and security best practices (CIS, NIST, Microsoft Cloud Adoption Framework).
• Experience automating security and compliance using Infrastructure as Code (IaC) and Azure DevOps or GitHub Actions.

Ability to work with a diverse group of people at both a functional and technical level and communicate at a level appropriate to audience; Ability to work both independently and as part of a team; Strong written and verbal communication skills.