Azure Networking Engineer — Secure Multi-Env Connectivity

Sigma Defense; City of Rome (NY); On-site; USD 110,000 - 153,000; Full time

Benefits offered by this job

Dental Insurance

Vision Insurance

Medical Insurance (HSA/FSA/DFSA)

Life and AD&D

EAP

401(k) Matching

PTO 160 Hours

Floating Holidays

Educational Assistance

Competitive Salary

Job summary

Sigma Defense seeks an Azure Network Engineer to own complex connectivity across multiple networks, secure routing paths, firewalls, and cloud environments. The role focuses on designing secure Azure networking solutions that balance connectivity with minimized attack surface.

The candidate will work on VNets, ExpressRoute, private endpoints, and hub-and-spoke architectures, with hands-on firewall expertise and DoD-regulated environment experience.

Qualifications

• 5+ years of relevant experience in Azure networking.
• Professional experience designing, implementing, and supporting Microsoft Azure networking environments.
• Strong understanding of TCP/IP, routing, DNS, NAT, VPNs, firewalls, and network segmentation.
• Hands-on experience configuring and troubleshooting Azure Firewall and Palo Alto Firewall.
• Experience designing and managing Azure VNets, subnets, NSGs, route tables, and UDRs.
• Experience implementing connectivity between multiple Azure VNets and environments.
• Experience troubleshooting complex network-routing and firewall issues.
• Understanding of hub-and-spoke architectures and centralized security models.
• Experience with Azure Private Link and Private Endpoints.
• Understanding of hybrid cloud connectivity with Azure ExpressRoute and VPNs.
• Ability to analyze network traffic, logs, and flow information to diagnose issues.
• Experience with DoD or highly regulated environments and RMF/NIST STIGs.
• Must be a U.S. citizen.

Responsibilities

• Design, implement, configure, and maintain network infrastructure within Microsoft Azure.
• Serve as a technical resource for Azure networking, routing, connectivity, and firewall technologies.
• Design and manage VNets, subnets, NSGs, UDRs, and ASGs.
• Configure and troubleshoot Azure Firewall and Palo Alto Firewall policies and rule sets.
• Develop firewall rules governing traffic between applications and networks.
• Design secure network segmentation for east-west and north-south traffic.
• Engineer secure connectivity between Azure environments, subscriptions, and external networks.
• Configure VNet peering, hub-and-spoke, ExpressRoute, private endpoints, and Private Link.
• Support hybrid connectivity using ExpressRoute and site-to-site VPNs.
• Design routing solutions involving firewalls and network appliances.
• Troubleshoot network connectivity, DNS, firewall, and latency issues.
• Analyze flows and logs to identify issues and security concerns.
• Implement Zero Trust architectures and micro-segmentation.
• Support IaC automation of Azure network infrastructure.

Skills

Azure Networking

Azure Firewall

Palo Alto Firewall

VNet Design

UDR & NSG

Private Endpoints

Hybrid Connectivity

Network Security

Zero Trust

IaC (Terraform)

Education

Bachelors in Network Engineering

Tools

Azure Firewall

Palo Alto Firewall

ExpressRoute

Azure VNets

Job description

Sigma Defense seeks an Azure Network Engineer to own complex connectivity across multiple networks, secure routing paths, firewalls, and cloud environments. The role focuses on designing secure Azure networking solutions that balance connectivity with minimized attack surface.

The candidate will work on VNets, ExpressRoute, private endpoints, and hub-and-spoke architectures, with hands-on firewall expertise and DoD-regulated environment experience.