Senior Network Engineer - Azure Cloud

Slipstream IT, LLC; Hampton (NJ); Hybrid; USD 130,000 - 190,000; Full time

Job summary

Slipstream IT, LLC in Hampton, NJ seeks a Senior Network Engineer to design, build, and optimize secure Azure cloud networks for life sciences clients. This is a six-month, full-time hybrid engagement with on-site four days per week and remote Fridays.

You will lead hands-on delivery of hybrid and cloud networking—landing zones, ExpressRoute, firewall, and automation—working with client IT teams in regulated environments where documentation and audit readiness matter.

Qualifications

• 8+ years enterprise network engineering experience.
• 4+ years designing Azure networking in production.
• Experience with ExpressRoute, VPN Gateway, VNet peering, UDRs, and BGP routing.
• Experience with Azure Firewall or enterprise firewall platforms.
• Terraform and/or Bicep proficiency; scripting in PowerShell, Azure CLI, or Python.
• Strong TCP/IP, DNS, DHCP, load balancing, and zero-trust knowledge.
• Ability to work independently as a contractor and manage own time.
• On-site in Hampton, NJ four days per week (Mon-Thu) for the full engagement.

Responsibilities

• Architecture & Design: create Azure network topologies (hub-and-spoke, Virtual WAN) and IP management.
• Hybrid Connectivity: configure ExpressRoute and VPN connectivity with on-prem and Azure sites.
• Network Security: manage Azure Firewall and NVAs, NSGs/ASGs, WAF, Private Endpoints.
• DNS & Traffic: implement Hybrid DNS and load balancing for critical apps.
• IaC: develop network deployments using Terraform or Bicep; integrate with CI/CD.
• Monitoring & Operations: use Network Watcher, Azure Monitor, Log Analytics for diagnostics.
• Migration Support: plan network readiness for Azure migrations.
• Governance & Compliance: apply Azure Policy and security baselines in GxP environments.
• Documentation: produce runbooks and as-built diagrams; transition ownership to client teams.

Skills

Azure networking

Hybrid cloud design

Network security

Terraform/Bicep

Scripting (PowerShell/Python)

BGP routing

Independent contractor

Education

Cisco CCNP/CCIE

GxP/regulatory familiarity

Tools

Terraform

Bicep

Azure DevOps

GitHub Actions

Azure CLI

PowerShell

Job description

Are you ready for new challenges and new opportunities?

Join our team!

Current job opportunities are posted here as they become available.

Subscribe to our RSS feeds to receive instant updates as new positions become available.

At Slipstream, we work to streamline IT Support and provide managed solutions with a strategic consulting and global leadership management approach. Our solutions are designed exclusively for emerging pharma and biotech organizations.

Slipstream’s industry-leading solutions free clients from the demands of internal IT and allow them to rapidly advance their mission. Led by a leadership team that has been together for over 10 years, you will join a proven team, culture, and strategy to drive innovation within the IT outsourcing industry while developing your skillset with the opportunities for internal growth.

Slipstream IT is seeking an experienced Senior Network Engineer to design, build, and optimize secure Azure cloud network infrastructure for life sciences clients. Engaged as an independent contractor for a six-month, full-time hybrid engagement based in our Hampton, NJ office, you will lead hands‑on delivery of enterprise‑grade hybrid and cloud networking, including landing zone connectivity, hybrid integration, network security, and automation. You will work alongside Slipstream delivery leads and client IT teams in regulated (GxP) environments where documentation, change control, and audit readiness matter as much as technical execution.

Responsibilities

• Architecture & Design: Design and implement Azure network topologies (hub-and-spoke and/or Virtual WAN), including VNets, subnetting, peering, user-defined routes, and IP address management aligned to Azure landing zone best practices.
• Hybrid Connectivity: Build and maintain ExpressRoute and site-to-site/point-to-site VPN connectivity between on‑premises data centers, lab and manufacturing sites, and Azure, including BGP routing and redundancy design.
• Network Security: Configure and manage Azure Firewall and/or third‑party NVAs, NSGs and ASGs, Application Gateway with WAF, Azure Front Door, DDoS protection, and Private Endpoints/Private Link to enforce segmentation and zero‑trust principles.
• DNS & Traffic Management: Design hybrid name resolution using Azure Private DNS and DNS Private Resolver; implement load balancing and traffic routing for business‑critical applications.
• Infrastructure as Code: Develop and maintain reusable network deployments using Terraform and/or Bicep, integrated with Azure DevOps or GitHub Actions CI/CD pipelines.
• Monitoring & Operations: Implement network monitoring and diagnostics using Network Watcher, Azure Monitor, and Log Analytics; troubleshoot connectivity, latency, and routing issues and drive root‑cause resolution.
• Migration Support: Plan and execute network readiness for workload migrations to Azure, including cutover planning, maintenance windows, and rollback procedures.
• Governance & Compliance: Apply Azure Policy and security baselines; produce design specifications, configuration records, and test evidence to support infrastructure qualification and change control in GxP environments.
• Knowledge Transfer: Create runbooks, network diagrams, and as‑built documentation, and transition operational ownership to client IT teams by engagement close.

Required Qualifications

• 8+ years of enterprise network engineering experience, including 4+ years designing and supporting Azure networking in production.
• Deep hands‑on expertise with ExpressRoute, VPN Gateway, VNet peering, UDRs, and BGP routing.
• Strong experience with Azure Firewall and/or enterprise firewall platforms (e.g., Palo Alto, Fortinet, Check Point), including NVA deployments in Azure.
• Proficiency with Terraform and/or Bicep, plus scripting in PowerShell, Azure CLI, or Python.
• Solid understanding of TCP/IP, DNS, DHCP, load balancing, network segmentation, and zero‑trust architecture.
• Proven ability to work independently as a contractor, managing your own time and deliverables with minimal supervision.
• Able to work on‑site in Hampton, NJ four days per week (Monday through Thursday) for the full engagement.
• Authorized to work in the United States without sponsorship.

Preferred Qualifications

• Cisco CCNP/CCIE, Palo Alto PCNSE, or equivalent networking certifications.
• Experience in life sciences or other regulated industries, including familiarity with GxP, computer system validation (CSV), and 21 CFR Part 11 considerations.
• Experience with Azure Virtual WAN, SD‑WAN integration, Microsoft Entra ID, and Microsoft Defender for Cloud.
• Background supporting connectivity for laboratory, manufacturing, or clinical systems.
• Technical Ownership: Takes end‑to‑end accountability for designs, from whiteboard through deployment and documentation.
• Security Mindset: Builds with least privilege, segmentation, and auditability as defaults, not afterthoughts.
• Problem Solving: Diagnoses complex, cross‑domain connectivity issues quickly and methodically.
• Client Communication: Explains technical trade‑offs clearly to client IT leaders, quality teams, and non‑technical stakeholders.
• Documentation Discipline: Produces clear, accurate, inspection‑ready artifacts suitable for regulated environments.
• Hybrid, full‑time engagement: on‑site in the Hampton, NJ office Monday through Thursday, and remote on Fridays, with availability during core Eastern Time business hours.
• Occasional evening or weekend work may be needed for scheduled maintenance windows and cutovers.
• As an independent contractor, you determine how the work is performed to meet agreed deliverables, supply your own computer and remote workspace, and are responsible for your own taxes, insurance, and benefits. Client system access is provisioned per client security requirements.
• Engagement terms, rate, and deliverables are governed by a separate consulting agreement and statement of work.

Slipstream is an equal opportunity employer that is committed to diversity and inclusion in the workplace. We prohibit discrimination and harassment of any kind based on race, color, sex, religion, sexual orientation or identity, national origin, genetic information, pregnancy, or any other protected characteristic as outlined by federal, state, or local laws. Slipstream makes hiring decisions based solely on qualifications, merit, and business needs at the time.

This job description may not be inclusive of all assigned duties, responsibilities, or aspects of the job described, and may be amended at any time at the sole discretion of the Employer