Senior Network Engineer - Azure Cloud

Slipstream Life Sciences; Hampton (NJ); Hybrid; USD 152,000 - 227,000; Full time

Benefits offered by this job

Remote Fridays (hybrid)

Own equipment and remote workspace

Independent contractor engagement

Job summary

Slipstream Life Sciences seeks an experienced Enterprise Network Engineer to design and implement Azure networking for pharma/biotech clients. You will build ExpressRoute and VPN connectivity, configure advanced firewalls and zero-trust architecture, and drive hybrid delivery across on-site Hampton, NJ and remote Fridays.

Independent contractor with self-management required. Required are 8+ years of enterprise networking, Azure expertise, and Terraform/Bicep with scripting.

Qualifications

• 8+ years enterprise network engineering, including Azure networking in production.
• Experience with ExpressRoute, VPN Gateway, VNet peering, UDRs, and BGP routing.
• Proficiency with Azure Firewall and third-party firewalls; NVAs in Azure.
• Terraform and/or Bicep plus scripting (PowerShell/Azure CLI/Python).
• Strong TCP/IP, DNS, DHCP, load balancing, and zero-trust concepts.
• Independent contractor capable of self-managing time and deliverables.
• On-site Hampton, NJ four days per week; US work authorization.

Responsibilities

• Design and implement Azure network topologies and governance.
• Build ExpressRoute and VPN connectivity with redundancy.
• Configure Azure Firewall, NVAs, NSGs/ASGs, WAF, Private Endpoints/Private Link.
• Design hybrid DNS and traffic routing for critical apps.
• Develop reusable deployments with Terraform or Bicep integrated CI/CD.
• Monitor, diagnose, and resolve connectivity, latency, and routing issues.
• Plan migrations to Azure with cutover readiness and rollback plans.
• Produce design docs, runbooks, and transfer ownership to client IT.

Skills

Azure networking

ExpressRoute

VPN Gateway

VNet peering

UDRs

BGP routing

Terraform

Bicep

PowerShell

Azure CLI

Python

zero-trust

network security

independent contractor

Education

Azure certifications (AZ-700, AZ-305, AZ-104)

Cisco CCNP/CCIE

Tools

Terraform

Bicep

PowerShell

Azure CLI

Python

Job description

At Slipstream, we work to streamline IT Support and provide managed solutions with a strategic consulting and global leadership management approach. Our solutions are designed exclusively for emerging pharma and biotech organizations.

Responsibilities

• Architecture & Design: Design and implement Azure network topologies (hub-and-spoke and/or Virtual WAN), including VNets, subnetting, peering, user-defined routes, and IP address management aligned to Azure landing zone best practices.
• Hybrid Connectivity: Build and maintain ExpressRoute and site-to-site/point-to-site VPN connectivity between on-premises data centers, lab and manufacturing sites, and Azure, including BGP routing and redundancy design.
• Network Security: Configure and manage Azure Firewall and/or third-party NVAs, NSGs and ASGs, Application Gateway with WAF, Azure Front Door, DDoS protection, and Private Endpoints/Private Link to enforce segmentation and zero-trust principles.
• DNS & Traffic Management: Design hybrid name resolution using Azure Private DNS and DNS Private Resolver; implement load balancing and traffic routing for business-critical applications.
• Infrastructure as Code: Develop and maintain reusable network deployments using Terraform and/or Bicep, integrated with Azure DevOps or GitHub Actions CI/CD pipelines.
• Monitoring & Operations: Implement network monitoring and diagnostics using Network Watcher, Azure Monitor, and Log Analytics; troubleshoot connectivity, latency, and routing issues and drive root-cause resolution.
• Migration Support: Plan and execute network readiness for workload migrations to Azure, including cutover planning, maintenance windows, and rollback procedures.
• Governance & Compliance: Apply Azure Policy and security baselines; produce design specifications, configuration records, and test evidence to support infrastructure qualification and change control in GxP environments.
• Knowledge Transfer: Create runbooks, network diagrams, and as-built documentation, and transition operational ownership to client IT teams by engagement close.

Required Qualifications

• 8+ years of enterprise network engineering experience, including 4+ years designing and supporting Azure networking in production.
• Deep hands-on expertise with ExpressRoute, VPN Gateway, VNet peering, UDRs, and BGP routing.
• Strong experience with Azure Firewall and/or enterprise firewall platforms (e.g., Palo Alto, Fortinet, Check Point), including NVA deployments in Azure.
• Proficiency with Terraform and/or Bicep, plus scripting in PowerShell, Azure CLI, or Python.
• Solid understanding of TCP/IP, DNS, DHCP, load balancing, network segmentation, and zero-trust architecture.
• Proven ability to work independently as a contractor, managing your own time and deliverables with minimal supervision.
• Able to work on-site in Hampton, NJ four days per week (Monday through Thursday) for the full engagement.
• Authorized to work in the United States without sponsorship.

Preferred Qualifications

• Microsoft Certified: Azure Network Engineer Associate (AZ-700); Azure Solutions Architect Expert (AZ-305) or Azure Administrator (AZ-104).
• Cisco CCNP/CCIE, Palo Alto PCNSE, or equivalent networking certifications.
• Experience in life sciences or other regulated industries, including familiarity with GxP, computer system validation (CSV), and 21 CFR Part 11 considerations.
• Experience with Azure Virtual WAN, SD-WAN integration, Microsoft Entra ID, and Microsoft Defender for Cloud.
• Background supporting connectivity for laboratory, manufacturing, or clinical systems.

Key Competencies

• Technical Ownership: Takes end-to-end accountability for designs, from whiteboard through deployment and documentation.
• Security Mindset: Builds with least privilege, segmentation, and auditability as defaults, not afterthoughts.
• Problem Solving: Diagnoses complex, cross-domain connectivity issues quickly and methodically.
• Client Communication: Explains technical trade-offs clearly to client IT leaders, quality teams, and non-technical stakeholders.
• Documentation Discipline: Produces clear, accurate, inspection-ready artifacts suitable for regulated environments.

Work Enviroment

• Hybrid, full-time engagement: on-site in the Hampton, NJ office Monday through Thursday, and remote on Fridays, with availability during core Eastern Time business hours.
• Occasional evening or weekend work may be needed for scheduled maintenance windows and cutovers.
• As an independent contractor, you determine how the work is performed to meet agreed deliverables, supply your own computer and remote workspace, and are responsible for your own taxes, insurance, and benefits. Client system access is provisioned per client security requirements.
• Engagement terms, rate, and deliverables are governed by a separate consulting agreement and statement of work.