Cloud Network Engineer: Azure & Hybrid Infra Lead

Siemens Healthineers AG; Charlotte (NC); On-site; USD 94,000 - 129,000; Full time

Job summary

Siemens Healthineers is seeking a Network Engineer to support Varian FSIC cloud operations across private, public, and hybrid infrastructures. You’ll manage Azure networking, ExpressRoute, VPNs, and security tooling, collaborating with service, operations, product management, and security teams globally.

Responsibilities include onboarding FSIC designed products, maintaining IP space, incident root-cause analysis, and documentation.

Qualifications

• A Bachelor’s or preferably Master’s Degree in computer science is required plus three years’ minimum relevant experience.
• Varian FSIC, TPASS and CloudPlanner infrastructure product knowledge.
• Strong knowledge of Varian’s suite of applications.
• Extensive experience supporting and managing networks in enterprise public, private, and hybrid cloud environments, preferably supporting large multi-subscription Microsoft Azure estates.
• Advanced hands-on experience with Microsoft Azure networking, including VNets, subnets, VNet peering, user-defined routes (UDRs), network security groups (NSGs), network interfaces, NAT, DNS, and cross-subscription connectivity.
• Strong knowledge of TCP/IP, UDP, ICMP, ARP, addressing, subnetting, CIDR, DNS, LDAP/LDAPS, Kerberos, RPC, routing, and return-path validation.
• Strong routing and switching expertise, including BGP, OSPF, EIGRP, MPLS, VLANs, STP, Layer 2/3 concepts, route propagation, path selection, redundancy, convergence, and failover.
• Hands-on experience designing, configuring, and troubleshooting Azure ExpressRoute connectivity, including BGP advertisements, learned routes, provider handoffs, scheduled maintenance, and customer/provider route exchange.
• Hands-on experience designing and troubleshooting site-to-site IPsec VPNs, including IKE/IPsec, tunnel interfaces, proxy IDs, BGP or static routing, and hybrid connectivity patterns.
• Advanced hands-on experience with Palo Alto Networks firewalls, including security policies, NAT and dynamic IP and port NAT, zones, interfaces, virtual routers, routing, VPN, URL filtering, logging, application connectivity, licensing, device certificates, and PAN‑OS lifecycle management.
• Experience validating end-to-end application delivery across client access, Citrix Gateway/ADC, firewalls, StoreFront or application services, and backend systems.
• Strong network security knowledge, including firewall policy, IDS/IPS concepts, ACLs, PKI, SSL/TLS, certificate chains, cipher and protocol compatibility, URL filtering, vulnerability remediation, and security hardening.
• Advanced network performance and root‑cause analysis skills using packet captures and diagnostic tools such as Wireshark, firewall captures, tcpdump, iperf, or SolarWinds; ability to analyze retransmissions, duplicate ACKs, zero‑window conditions, resets, packet loss, MTU/MSS, TLS negotiation, session aging, and application‑response delays.
• Experience troubleshooting business-critical and highly available applications, including cloud platform services, application integrations, SMB/application performance, syslog, telemetry, and monitoring paths.
• Experience supporting network monitoring, observability, and SIEM integrations, including troubleshooting logging loops, missing telemetry, and connectivity to platforms such as Microsoft Sentinel.
• Experience implementing and troubleshooting Active Directory integrations and one-way domain trusts, including DNS, LDAP/LDAPS, Kerberos, RPC, domain-controller reachability, routing, and firewall requirements.
• Experience working directly with customer IT teams, telecommunications carriers, exchange/service providers, and technology vendors to review requirements, coordinate changes, and resolve urgent connectivity issues.
• Ability to develop customer-specific connectivity and ACL documentation covering source and destination networks, ports, protocols, NAT, routing, certificates, identity, and application use cases.
• Experience creating and maintaining cloud and network architecture documentation, Microsoft Visio or Lucidchart diagrams, as-built documents, operating procedures, implementation notes, configuration templates, troubleshooting guides, upgrade-validation procedures, and change-validation or rollback steps.
• Experience reviewing vulnerability findings, assessing operational impact, defining remediation and rollout plans, and validating network software upgrades, patches, content updates, configuration changes, and policy updates.
• Strong incident, problem, and change management experience, including ticket handling, root-cause analysis, follow-up reporting, production troubleshooting, and customer-impacting outage resolution.
• Clear written and verbal communication skills, with the ability to explain technical concepts to customer, business, security, product, service, operations, and implementation stakeholders.
• Demonstrated ability to serve as a senior technical escalation resource, mentor colleagues, define technical approaches for complex changes, and provide implementation guidance across teams.
• Ability to provide on-call support as required and work North American business hours.

Responsibilities

• Providing network operations and support for Varian’s FullScale Infinity Cloud (FSIC) solutions. Private, public and hybrid infrastructure, network and security.
• Leading network onboarding for FSIC designed product adhering to FSIC configuration standards.
• Maintaining a strong knowledge of Varian’s suite of applications.
• Configuring various cloud solutions including monitoring, application access, security, Citrix NetScaler, Citrix ADC, Palo Alto Networks, etc.
• Configuring and supporting backbone connections over ExpressRoute (Azure), and direct connection and VPN architecture.
• Maintaining allocation of IP CIDR block, perform maintenance involving modification of network, subnets, vlans, routes etc.
• Verifying and action on events aggregated from network monitoring tools and Web Application Firewall using Varian approved tools.
• Troubleshooting and determining root cause of issues.
• Collaborating to quickly resolve any network related outages and resolve customer impacting issues quickly.
• Contributing to the successful execution of projects.
• Creating, updating, and completing documentation.
• Investigate root cause analysis of incidents with follow up reporting and final content generation.
• Collaborating with network engineers on procedures, techniques, tips & knowledge to improve operations, security and work performed.
• Providing the highest level of customer service.
• Advance understanding of vendor and telco/exchange/service providers support escalation paths and being able to elevate support requests to these vendors in a typically urgent and timely fashion.
• Appling network system updates, patches, configuration changes.
• Planning network layouts and configures systems to user environments.
• Serving as a technical mentor to colleagues as necessary.
• Staying up to date with assigned Learning Management System courses.
• Eagerness to provide the highest level of customer service.
• On call support as required.
• Working schedule North American business hours.

Skills

Azure networking

ExpressRoute

Citrix NetScaler/ADC

Palo Alto firewalls

BGP/OSPF

DNS/LDAP/LDAPS

VPN design

Network troubleshooting

On-call support

Education

Bachelor’s or Master’s in CS/related field

Tools

Citrix NetScaler/ADC

Palo Alto firewalls

Azure networking tools (VNets, NSGs, etc.)

Job description

Siemens Healthineers is seeking a Network Engineer to support Varian FSIC cloud operations across private, public, and hybrid infrastructures. You’ll manage Azure networking, ExpressRoute, VPNs, and security tooling, collaborating with service, operations, product management, and security teams globally.

Responsibilities include onboarding FSIC designed products, maintaining IP space, incident root-cause analysis, and documentation.