Senior Network Engineer

CloudCover; Hampton (NJ); Híbrido; USD 140 000 - 170 000; Tempo integral

Resumo da oferta

CloudCover in Hampton, NJ seeks a Senior Network Engineer with pharma experience for a 6-12 month hybrid engagement. You will design and optimize Azure cloud networks for life sciences clients, with on-site work Monday through Thursday and remote Fridays in EST hours.

You will lead landing zone connectivity, hybrid integration, firewall controls, and IaC automation, collaborating with client IT teams in regulated environments to ensure audit readiness.

Qualificações

• 8+ years in enterprise networking with production Azure experience.
• Proficient with ExpressRoute, VPN gateways, VNet peering, UDRs, and BGP.
• Experience with Azure Firewall and NVAs; knowledge of security controls.
• Scripting skills in PowerShell/Azure CLI/Python; IaC mindset.

Responsabilidades

• Design and implement Azure network topologies including hub-and-spoke or Virtual WAN.
• Build ExpressRoute and site-to-site VPN connectivity with redundancy.
• Configure Azure Firewall, NVAs, NSGs/ASGs, WAF, and Private Endpoints.
• Design DNS and traffic management with Azure Private DNS and Resolver.
• Develop reusable network deployments using Terraform or Bicep.
• Monitor networks with Network Watcher/Azure Monitor and diagnose issues.
• Plan migrations to Azure and coordinate cutovers and rollback steps.
• Maintain governance and compliance in GxP environments; document designs.
• Create runbooks and handover documentation to client IT teams.

Conhecimentos

Azure networking

Terraform/Bicep

Scripting

ExpressRoute/VPN

Firewall/NVA

TCP/IP/DNS

Zero-trust

Independent contractor

Ferramentas

Azure DevOps

GitHub Actions

Azure CLI

Terraform

Bicep

Descrição da oferta de emprego

About CloudCover

CloudCover is a global IT service provider specializing in third-party maintenance (TPM) and IT lifecycle management. Backed by in-house L1–L3 engineers, OEM subject-matter experts, and a global field service network, CloudCover helps partners and their customers simplify complex infrastructure operations. Its CoverIT™ platform unifies third-party maintenance, professional and managed services, monitoring, contracts, assets, and ticketing into a single operating model across desktop and data center environments, while MonitorIT™ adds AI-enabled proactive monitoring. A SOC 2–certified organization with 24/7 global support, CloudCover enables partners to deliver white-labeled, enterprise-grade services that reduce cost, improve uptime, and drive predictable recurring revenue. For more information, visit cloudcover.it.

Job Description

CloudCover has a customer seeking a Senior Network Engineer with Pharma background for a 6-12 month Hybrid position located in Hampton, NJ. This is a Hybrid, full-time engagement: on-site in the Hampton, NJ office Monday through Thursday, and remote on Fridays, with availability during core Eastern Time business hours. We’re seeking an experienced Senior Network Engineer to design, build, and optimize secure Azure cloud network infrastructure for life sciences clients. Engaged as a consultant for a six-month, full-time hybrid engagement based in the customers Hampton, NJ office, you will lead hands-on delivery of enterprise-grade hybrid and cloud networking, including landing zone connectivity, hybrid integration, network security, and automation. You will work alongside the delivery leads and client IT teams in regulated (GxP) environments where documentation, change control, and audit readiness matter as much as technical execution.

This role requires direct and prior experience working within the pharmaceutical, biotechnology, or broader life sciences industry. Candidates without life sciences experience will not meet the requirements for this position.

Responsibilities

• Architecture & Design: Design and implement Azure network topologies (hub-and-spoke and/or Virtual WAN), including VNets, subnetting, peering, user-defined routes, and IP address management aligned to Azure landing zone best practices.
• Hybrid Connectivity: Build and maintain ExpressRoute and site-to-site/point-to-site VPN connectivity between on-premises data centers, lab and manufacturing sites, and Azure, including BGP routing and redundancy design.
• Network Security: Configure and manage Azure Firewall and/or third-party NVAs, NSGs and ASGs, Application Gateway with WAF, Azure Front Door, DDoS protection, and Private Endpoints/Private Link to enforce segmentation and zero-trust principles.
• DNS & Traffic Management: Design hybrid name resolution using Azure Private DNS and DNS Private Resolver; implement load balancing and traffic routing for business-critical applications.
• Infrastructure as Code: Develop and maintain reusable network deployments using Terraform and/or Bicep, integrated with Azure DevOps or GitHub Actions CI/CD pipelines.
• Monitoring & Operations: Implement network monitoring and diagnostics using Network Watcher, Azure Monitor, and Log Analytics; troubleshoot connectivity, latency, and routing issues and drive root-cause resolution.
• Migration Support: Plan and execute network readiness for workload migrations to Azure, including cutover planning, maintenance windows, and rollback procedures.
• Governance & Compliance: Apply Azure Policy and security baselines; produce design specifications, configuration records, and test evidence to support infrastructure qualification and change control in GxP environments.
• Knowledge Transfer: Create runbooks, network diagrams, and as-built documentation, and transition operational ownership to client IT teams by engagement close.

Required Qualifications

• 8+ years of enterprise network engineering experience, including 4+ years designing and supporting Azure networking in production.
• Deep hands-on expertise with ExpressRoute, VPN Gateway, VNet peering, UDRs, and BGP routing.
• Strong experience with Azure Firewall and/or enterprise firewall platforms (e.g., Palo Alto, Fortinet, Check Point), including NVA deployments in Azure.
• Proficiency with Terraform and/or Bicep, plus scripting in PowerShell, Azure CLI, or Python.
• Solid understanding of TCP/IP, DNS, DHCP, load balancing, network segmentation, and zero-trust architecture.
• Proven ability to work independently as a contractor, managing your own time and deliverables with minimal supervision.
• Able to work on-site in Hampton, NJ four days per week (Monday through Thursday) for the full engagement.
• Authorized to work in the United States without sponsorship.

Preferred Qualifications

• Microsoft Certified: Azure Network Engineer Associate (AZ-700); Azure Solutions Architect Expert (AZ-305) or Azure Administrator (AZ-104).
• Cisco CCNP/CCIE, Palo Alto PCNSE, or equivalent networking certifications.
• Experience in life sciences or other regulated industries, including familiarity with GxP, computer system validation (CSV), and 21 CFR Part 11 considerations.
• Experience with Azure Virtual WAN, SD-WAN integration, Microsoft Entra ID, and Microsoft Defender for Cloud.
• Background supporting connectivity for laboratory, manufacturing, or clinical systems.

Key Competencies

• Technical Ownership: Takes end-to-end accountability for designs, from whiteboard through deployment and documentation.
• Security Mindset: Builds with least privilege, segmentation, and auditability as defaults, not afterthoughts.
• Problem Solving: Diagnoses complex, cross-domain connectivity issues quickly and methodically.
• Client Communication: Explains technical trade-offs clearly to client IT leaders, quality teams, and non-technical stakeholders.
• Documentation Discipline: Produces clear, accurate, inspection-ready artifacts suitable for regulated environments.

Work Environment

• Hybrid, full-time engagement: on-site in the Hampton, NJ office Monday through Thursday, and remote on Fridays, with availability during core Eastern Time business hours.
• Occasional evening or weekend work may be needed for scheduled maintenance windows and cutovers.
• As an independent contractor, you determine how the work is performed to meet agreed deliverables, supply your own computer and remote workspace, and are responsible for your own taxes, insurance, and benefits. Client system access is provisioned per client security requirements.
• Engagement terms, rate, and deliverables are governed by a separate consulting agreement and statement of work.