Senior Network Engineer - Azure Cloud

At Slipstream, we work to streamline IT Support and provide managed solutions with a strategic consulting and global leadership management approach. Our solutions are designed exclusively for emerging pharma and biotech organizations.

• Architecture & Design:
  Design and implement Azure network topologies (hub-and-spoke and/or Virtual WAN), including VNets, subnetting, peering, user-defined routes, and IP address management aligned to Azure landing zone best practices.
• Hybrid Connectivity:
  Build and maintain Express Route and site-to-site/point-to-site VPN connectivity between on-premises data centers, lab and manufacturing sites, and Azure, including BGP routing and redundancy design.
• Network Security:
  Configure and manage Azure Firewall and/or third-party NVAs, NSGs and ASGs, Application Gateway with WAF, Azure Front Door, DDoS protection, and Private Endpoints/Private Link to enforce segmentation and zero-trust principles.
• DNS & Traffic Management:
  Design hybrid name resolution using Azure Private DNS and DNS Private Resolver; implement load balancing and traffic routing for business-critical applications.
• Infrastructure as Code:
  Develop and maintain reusable network deployments using Terraform and/or Bicep, integrated with Azure Dev Ops or Git Hub Actions CI/CD pipelines.
• Monitoring & Operations:
  Implement network monitoring and diagnostics using Network Watcher, Azure Monitor, and Log Analytics; troubleshoot connectivity, latency, and routing issues and drive root-cause resolution.
• Migration Support:
  Plan and execute network readiness for workload migrations to Azure, including cutover planning, maintenance windows, and rollback procedures.
• Governance & Compliance:
  Apply Azure Policy and security baselines; produce design specifications, configuration records, and test evidence to support infrastructure qualification and change control in GxP environments.
• Knowledge Transfer:
  Create runbooks, network diagrams, and as-built documentation, and transition operational ownership to client IT teams by engagement close.

• 8+ years of enterprise network engineering experience, including 4+ years designing and supporting Azure networking in production.
• Deep hands-on expertise with Express Route, VPN Gateway, VNet peering, UDRs, and BGP routing.
• Strong experience with Azure Firewall and/or enterprise firewall platforms (e.g., Palo Alto, Fortinet, Check Point), including NVA deployments in Azure.
• Proficiency with Terraform and/or Bicep, plus scripting in Power Shell, Azure CLI, or Python.
• Solid understanding of TCP/IP, DNS, DHCP, load balancing, network segmentation, and zero-trust architecture.
• Proven ability to work independently as a contractor, managing your own time and deliverables with minimal supervision.
• Able to work on-site in Hampton, NJ four days per week (Monday through Thursday) for the full engagement.
• Authorized to work in the United States without sponsorship.

• Microsoft Certified:
  Azure Network Engineer Associate (AZ-700);
  Azure Solutions Architect Expert (AZ-305) or Azure Administrator (AZ-104).
• Cisco CCNP/CCIE, Palo Alto PCNSE, or equivalent networking certifications.
• Experience in life sciences or other regulated industries, including familiarity with GxP, computer system validation (CSV), and 21 CFR Part 11 considerations.
• Experience with Azure Virtual WAN, SD-WAN integration, Microsoft Entra , and Microsoft Defender for Cloud.
• Background supporting connectivity for laboratory, manufacturing, or clinical systems.

• Technical Ownership:
  Takes end-to-end accountability for designs, from whiteboard through deployment and documentation.
• Security Mindset:
  Builds with least privilege, segmentation, and auditability as defaults, not afterthoughts.
• Problem Solving:
  Diagnoses complex, cross-domain connectivity issues quickly and methodically.
• Client Communication:
  Explains technical trade-offs clearly to client IT leaders, quality teams, and non-technical stakeholders.
• Documentation Discipline:
  Produces clear, accurate, inspection-ready artifacts suitable for regulated environments.

• Hybrid, full-time engagement: on-site in the Hampton, NJ office Monday through Thursday, and remote on Fridays, with availability during core Eastern Time business hours.
• Occasional evening or weekend work may be needed for scheduled maintenance windows and cutovers.
• As an independent contractor, you determine how the work is performed to meet agreed deliverables, supply…