Senior Network Engineer

Cloud Cover is a global IT service provider specializing in third-party maintenance (TPM) and IT lifecycle management. Backed by in-house L1–L3 engineers, OEM subject-matter experts, and a global field service network, Cloud Cover helps partners and their customers simplify complex infrastructure operations. Its CoverIT™ platform unifies third-party maintenance, professional and managed services, monitoring, contracts, assets, and ticketing into a single operating model across desktop and data center environments, while MonitorIT™ adds AI-enabled proactive monitoring.

A SOC 2–certified organization with 24/7 global support, Cloud Cover enables partners to deliver white-labeled, enterprise-grade services that reduce cost, improve uptime, and drive predictable recurring revenue. For more information, visit cloudcover.it.

Cloud Cover has a customer seeking a Senior Network Engineer with Pharma background for a 6-12 month Hybrid position located in Hampton, NJ. This is a Hybrid, full-time engagement: on-site in the Hampton, NJ office Monday through Thursday, and remote on Fridays, with availability during core Eastern Time business hours. We’re seeking an experienced Senior Network Engineer to design, build, and optimize secure Azure cloud network infrastructure for life sciences clients.

Engaged as a consultant for a six-month, full-time hybrid engagement based in the customers Hampton, NJ office, you will lead hands-on delivery of enterprise-grade hybrid and cloud networking, including landing zone connectivity, hybrid integration, network security, and automation. You will work alongside the delivery leads and client IT teams in regulated (GxP) environments where documentation, change control, and audit readiness matter as much as technical execution.

This role requires direct and prior experience working within the pharmaceutical, biotechnology, or broader life sciences industry. Candidates without life sciences experience will not meet the requirements for this position.

• Architecture & Design:
  Design and implement Azure network topologies (hub-and-spoke and/or Virtual WAN), including VNets, subnetting, peering, user-defined routes, and IP address management aligned to Azure landing zone best practices.
• Hybrid Connectivity:
  Build and maintain Express Route and site-to-site/point-to-site VPN connectivity between on-premises data centers, lab and manufacturing sites, and Azure, including BGP routing and redundancy design.
• Network Security:
  Configure and manage Azure Firewall and/or third-party NVAs, NSGs and ASGs, Application Gateway with WAF, Azure Front Door, DDoS protection, and Private Endpoints/Private Link to enforce segmentation and zero-trust principles.
• DNS & Traffic Management:
  Design hybrid name resolution using Azure Private DNS and DNS Private Resolver; implement load balancing and traffic routing for business-critical applications.
• Infrastructure as Code:
  Develop and maintain reusable network deployments using Terraform and/or Bicep, integrated with Azure Dev Ops or Git Hub Actions CI/CD pipelines.
• Monitoring & Operations:
  Implement network monitoring and diagnostics using Network Watcher, Azure Monitor, and Log Analytics; troubleshoot connectivity, latency, and routing issues and drive root-cause resolution.
• Migration Support:
  Plan and execute network readiness for workload migrations to Azure, including cutover planning, maintenance windows, and rollback procedures.
• Governance & Compliance:
  Apply Azure Policy and security baselines; produce design specifications, configuration records, and test evidence to support infrastructure qualification and change control in GxP environments.
• Knowledge Transfer:
  Create runbooks, network…