Azure Cloud Configuration Network Engineer

Revolutional delivers advanced technology solutions and mission support to federal agencies across civilian, health, and national security environments. We apply modern capabilities, including AI/ML, cloud, cybersecurity, and IT modernization to solve complex challenges, enable faster and more secure operations, and drive measurable mission outcomes.

We are redefining how federal technology gets built and delivered by operating with a product mindset, prioritizing speed, ownership, and execution over bureaucracy.

Azure Cloud Configuration Network Engineer

Onsite (Washington, D.C.)

Full-time

145k - 175k DOE

Active Top Secret with SCI eligibility required

U.S. citizenship required

0-10%

Revolutional is seeking a Cloud Configuration Network Engineer with deep expertise in Microsoft Azure networking to configure, secure, and maintain enterprise network infrastructure across Azure environments. This role is hands‑on: the engineer will own day‑to‑day configuration, troubleshooting, and lifecycle management of Azure networking components, working closely with security, systems, and application teams to support reliable, well‑documented network operations.

• Configure and maintain core Azure networking components:
  Virtual Networks (VNets), subnets, VPN Gateways, Express Route circuits, and Virtual WAN.
• Configure and manage Network Security Groups (NSGs), Application Security Groups (ASGs), Azure Firewall, and Web Application Firewall (WAF) policies to enforce segmentation and security controls.
• Implement and maintain hybrid connectivity between on‑premises data centers and Azure via Site-to-Site VPN, Express Route, and Virtual WAN.
• Configure Azure Load Balancer, Application Gateway, Front Door, and Traffic Manager for high availability and traffic distribution.
• Manage DNS configuration (Azure DNS, Private DNS Zones) and IP address management (IPAM) across Azure subscriptions.
• Deploy and maintain Private Link / Private Endpoint configurations to secure connectivity to PaaS services.
• Configure and maintain routing (BGP, route tables, user‑defined routes) across hub‑and‑spoke and Virtual WAN topologies.
• Monitor network health, performance, and security posture using Azure Network Watcher, Azure Monitor, and Log Analytics; troubleshoot connectivity, latency, and routing issues.
• Develop and maintain Infrastructure-as-Code (ARM templates, Bicep, or Terraform) for repeatable, auditable network configuration changes.
• Participate in change management processes: documenting configurations, network diagrams, and standard operating procedures.
• Respond to and resolve network incidents and service requests within defined SLAs.
• Collaborate with security and infrastructure teams to support network design for new workloads, migrations, and capacity changes.

• Active Top Secret (TS) clearance with SCI eligibility. Must be a U.S. citizen.
• Bachelor's degree in a related technical field, or equivalent professional experience.
• 5+ years overall network engineering experience.
• 3+ years of hands‑on experience configuring, administering, and troubleshooting Microsoft Azure networking environments.
• Demonstrated experience configuring Azure VNets, subnets, NSGs, Express Route, VPN Gateway, and Azure Firewall.
• Solid understanding of core networking fundamentals: TCP/IP, routing, switching, DNS, DHCP, BGP, and VPN protocols (IPsec/IKEv2).
• Experience configuring and troubleshooting hybrid connectivity between on‑premises and Azure environments.
• Experience with Infrastructure-as-Code tools (ARM templates, Bicep, or Terraform) for network configuration and change control.
• Working knowledge of network security best practices, including segmentation, least‑privilege access, and firewall policy management.
• Security+ Certification.

• Microsoft Certified:
  Azure Network Engineer Associate or Azure Administrator Associate.
• Experience with Azure Virtual WAN, Azure Front Door, or multi‑region network architectures.
• Experience integrating third‑party network/security appliances (e.g., Palo Alto, Cisco, Fortinet) with Azure.
• Scripting…