Senior Cloud & Network Security Engineer

Senior Cloud and Network Security Engineer (Azure)

We are seeking a Senior Cloud and Network Security Engineer with at least 10 years of relevant experience to design, implement, and maintain secure network infrastructure across Microsoft Azure and on-premises environments. This role combines network security architecture with hands‑on engineering, with particular responsibility for DNS, VPN connectivity, Azure Private Endpoints, proxies, and on‑premises firewalls. The successful candidate will support multiple projects, translating business and technical requirements into secure, reliable, and scalable network designs.

• Design end-to-end network security architectures for Azure and hybrid environments, ensuring alignment with enterprise security standards and project requirements.
• Develop high-level and low-level designs, network diagrams, IP addressing plans, traffic flow mappings, and firewall rule matrices.
• Define network segmentation, routing, ingress and egress controls, and secure connectivity between applications, cloud services, and on-premises systems.
• Review proposed solutions, identify network security risks and dependencies, and recommend appropriate controls.
• Work with solution architects, cybersecurity teams, infrastructure engineers, application teams, and vendors throughout project delivery.

• Configure and manage Azure Virtual Networks, subnets, peering, route tables, Network Security Groups, and Application Security Groups.
• Implement Azure Private Endpoints and Private Link, including associated DNS configuration and access controls.
• Configure and troubleshoot Azure DNS, Private DNS Zones, Azure DNS Private Resolver, and hybrid DNS resolution.
• Implement and maintain site-to-site and point-to-site VPNs, Azure VPN Gateway, and Express Route connectivity where required.
• Configure Azure Firewall, network virtual appliances, NAT Gateway, and application protection services such as Web Application Firewall.
• Design and maintain hub-and-spoke or Azure Virtual WAN architectures, including centralized inspection and controlled outbound access.

• Configure, maintain, and troubleshoot on‑premises firewalls, including security policies, NAT rules, routing, VPN tunnels, and logging.
• Manage enterprise proxies and secure web gateways, including authentication, URL filtering, allow lists, and TLS inspection requirements.
• Establish secure connectivity between Azure workloads, corporate networks, third‑party services, and remote users.
• Investigate connectivity issues involving DNS, routing, asymmetric traffic flows, firewall policies, proxies, certificates, and VPN tunnels.
• Review firewall and proxy rules regularly to remove unnecessary access and enforce least‑privilege connectivity.

• Monitor network availability, performance, and security using Azure and enterprise monitoring tools.
• Support incident investigation and root cause analysis for network and security‑related issues.
• Implement changes through established change management processes, including impact assessments, testing, and rollback plans.
• Automate repeatable configurations using Terraform, Bicep, Power Shell, or Azure CLI.
• Maintain configuration documentation, operational runbooks, architecture standards, and support handover materials.
• Validate resilience and failover arrangements for critical network connectivity and security components.

• Minimum 10 years of experience in network engineering, network security, infrastructure security, or closely related roles.
• Substantial hands‑on experience designing and…