Azure Network Seg Implementation

We are looking for a Cloud Engineer to support a Contract engagement focused on strengthening Azure network governance in Kansas City, Missouri. This role will evaluate the current cloud networking environment, identify control gaps, and implement policy-based guardrails aligned with defined security standards. The position is ideal for a hands-on, detail-oriented individual who can translate network security requirements into tested Azure Policy configurations and practical enforcement mechanisms.

Responsibilities:
• Assess two Azure subscriptions to understand existing network architecture, security configurations, and control coverage.
• Examine components such as virtual networks, network security groups, routing paths, firewalls, and private endpoints to determine alignment with required standards.
• Identify deficiencies against established network control expectations and document findings with clear supporting evidence.
• Design, build, and validate Azure Policies that audit and enforce network-related security requirements.
• Integrate policy deployment activities into CI/CD workflows to support consistent and repeatable implementation.
• Establish and test guardrails for key boundary areas, including administrative or internet-facing access, private access to platform services, routed traffic through hub or security layers, and exposure of public network configurations.
• Produce organized technical documentation covering assessments, policy logic, test results, and compliance evidence.
• Work closely with stakeholders to review outcomes, refine enforcement approaches, and support controlled testing within the designated subscription scope.