Network Security & Azure Engineer

Network Security & Azure Engineer

Location: West Virginia / Mid-Atlantic Region
Type: Full-Time
Experience Level: Junior through Senior
Compensation: Competitive and based on experience, certifications, and technical capability

About the Role

Advantage Technology is looking for a Network Security & Azure Engineer focused on firewall security, network segmentation, secure connectivity, advanced troubleshooting, and Microsoft Azure networking.

We provide professional network and security services to commercial, enterprise, State, Local Government, Education, and K-12 customers across thousands of sites .

A major responsibility of this role is helping us harden, secure, standardize, and continuously improve the firewall and network security solutions we deliver to our customers .

Our clients expect more than basic firewall installation. We are responsible for delivering secure, well-engineered, documented, scalable, and supportable solutions that meet a high professional-services standard.

We are open to candidates at multiple experience levels. You may be an experienced engineer capable of leading complex firewall and hybrid-cloud projects, or an earlier-career engineer with strong networking fundamentals who wants to grow deeper into security and Azure networking.

Compensation and responsibilities will be aligned with your experience and technical ability.

This position is less focused on rack-and-stack work and more focused on engineering, configuration, security hardening, troubleshooting, migrations, architecture, and hybrid cloud connectivity .

What You’ll Work With

Our customer environments include technologies such as:

Firewall & Security

• Fortinet / FortiGate

• SonicWall

• Palo Alto Networks

• Cisco Meraki

• Sophos

• Cisco security technologies

• Next-generation firewalls

• VPN and secure remote access

• Network segmentation

• Firewall policies and security rules

• NAT and routing

• SD-WAN

• High-availability firewall environments

Networking

• Extreme Networks

• Cisco

• Cisco Meraki

• HPE Aruba

• Juniper Mist

• Enterprise switching and routing

• VLANs and network segmentation

• WAN and multi-site networking

Microsoft Azure

• Azure Virtual Networks

• Azure Firewall

• Network Security Groups

• VPN Gateway

• Site-to-Site VPN

• Point-to-Site VPN

• Azure routing

• Hybrid cloud connectivity

• Private connectivity

• On-premises-to-Azure networking

You do not need experience with every technology listed above.

What You’ll Do

Depending on your experience level, responsibilities may include:

• Configure, troubleshoot, and manage next-generation firewalls

• Harden firewall configurations before and after deployment

• Build and maintain firewall policies and security rules

• Review rule sets and identify security improvements

• Configure NAT, routing, security zones, and network objects

• Configure site-to-site and remote-access VPNs

• Troubleshoot firewall, VPN, Internet, routing, and WAN connectivity

• Assist with or lead firewall replacements and migrations

• Validate firewall configurations before and after production cutovers

• Design and implement network segmentation

• Configure secure communication between network segments

• Troubleshoot Layer 2 and Layer 3 network issues

• Support SD-WAN and multi-site connectivity

• Implement secure connectivity between customer locations

• Support Microsoft Azure networking environments

• Connect on-premises environments securely to Azure

• Troubleshoot traffic flows that span both physical and cloud infrastructure

• Participate in network and security architecture discussions

• Create and maintain technical standards and documentation

• Work directly with customers, project managers, security engineers, and network engineers

• Travel to customer locations when projects require on-site engineering

Harden and Standardize Our Security Deliverables

Advantage Technology supports infrastructure across thousands of customer sites.

This role helps ensure that the firewall and network security solutions we deliver are engineered consistently and securely across our customer base.

Responsibilities may include:

• Developing and enforcing firewall configuration standards

• Hardening new and existing firewall deployments

• Standardizing security policies and implementation practices

• Identifying unnecessary exposure and overly permissive rules

• Improving network segmentation

• Standardizing VPN configurations

• Improving logging, monitoring, and visibility

• Reviewing customer environments for security weaknesses

• Improving technical documentation and configuration consistency

• Creating repeatable deployment standards

• Validating security configurations following migrations and upgrades

• Reducing configuration drift over time

• Developing scalable security practices that can be applied across thousands of locations

Experienced engineers may also help define reference architectures, templates, engineering standards, and best practices used by other Advantage Technology engineers.

When Advantage Technology delivers a firewall or secure network solution, it should be engineered, hardened, documented, and supportable at a level expected by sophisticated commercial, SLED, and enterprise clients .

Hybrid Network Engineering

Many customer environments now span both physical infrastructure and Microsoft Azure.

A key responsibility of this position is supporting and securing hybrid network environments that cross on-premises infrastructure and cloud services .

This may include engineering and troubleshooting across:

• Physical firewalls, routers, switching, and WAN connectivity

• Azure Virtual Networks and subnets

• Site-to-Site VPN connectivity

• Azure VPN Gateway

• Azure Firewall

• Network Security Groups

• Routing between on-premises networks and Azure

• DNS and name-resolution dependencies

• Secure access to cloud-hosted workloads

• Segmentation across physical and cloud environments

• Traffic flows that move through both on-premises and Azure infrastructure

The engineer should be able to understand the complete path of network traffic , from a physical endpoint or customer site, through firewalls and WAN infrastructure, into Microsoft Azure and back again.

More experienced candidates may design these hybrid architectures, while developing engineers may participate in configuration, implementation, troubleshooting, and validation.

Firewall & Network Security

Firewall engineering will be a primary focus of this position.

Projects may include:

• New next-generation firewall deployments

• Firewall replacements and migrations

• Firewall security assessments

• Firewall policy design

• Rule-base cleanup and optimization

• Security hardening

• NAT configuration

• Internet circuit migrations

• Site-to-site VPNs

• Remote-access VPNs

• SD-WAN

• Network segmentation

• Secure guest networks

• Multi-site connectivity

• High-availability firewall configurations

• Firmware and operating system upgrades

• Lifecycle management

• Logging and monitoring improvements

The ability to understand how traffic flows through a network and where security controls should be applied is extremely important.

Network Segmentation & Security

This role will help customers reduce risk by improving how networks are segmented and secured.

Responsibilities may include:

• Designing VLAN and security-zone segmentation

• Implementing firewall-based segmentation

• Separating users, servers, wireless, IoT, cameras, voice, guest networks, operational technology, and other device classes

• Controlling communication between network segments

• Reducing unnecessary lateral movement

• Reviewing flat networks and developing modernization plans

• Implementing policy-driven security controls

• Supporting secure network architecture

• Aligning network architecture with security and compliance requirements

Microsoft Azure Networking

Azure networking is an important part of this position.

Projects may include:

• Azure Virtual Network configuration

• Subnet architecture

• Network Security Groups

• User Defined Routes

• Azure VPN Gateway

• Site-to-Site VPN connectivity

• Point-to-Site VPN connectivity

• Azure Firewall

• Hybrid network connectivity

• Private connectivity

• DNS and name-resolution troubleshooting

• On-premises-to-Azure connectivity

• Routing between Azure and customer locations

• Troubleshooting cloud network communication

• Secure access to Azure workloads

Experience connecting traditional enterprise networks with Microsoft Azure is especially valuable.

Grow With the Position

We are intentionally hiring across multiple experience levels.

Earlier-Career Engineers

You may be a strong fit if you:

• Understand TCP/IP networking fundamentals

• Understand VLANs, routing, NAT, DHCP, and DNS

• Have experience working with firewalls

• Understand firewall rules and security policies

• Have configured or supported VPNs

• Have experience troubleshooting network connectivity

• Have exposure to Fortinet, SonicWall, Palo Alto, Meraki, Sophos, Cisco, or similar technologies

• Have a strong interest in network security

• Want to develop deeper Microsoft Azure networking skills

• Want to learn how professional-services security solutions are designed and delivered

You will have opportunities to work alongside experienced engineers and grow into more advanced firewall, security, segmentation, and cloud-networking responsibilities.

Experienced Engineers

More experienced candidates may:

• Architect enterprise firewall and network security solutions

• Lead large firewall migrations

• Design secure multi-site networks

• Develop network segmentation strategies

• Lead complex VPN and hybrid-connectivity projects

• Design Azure networking environments

• Troubleshoot complex production security and networking issues

• Perform security and architecture reviews

• Standardize firewall configurations across customer environments

• Develop reference architectures and engineering standards

• Serve as a senior technical escalation point

• Mentor developing engineers

• Lead customer design and architecture discussions

This Is an Engineering Position

This position is less rack-and-stack and more engineering, security, configuration, and troubleshooting .

Some customer-site travel will be required, particularly for major migrations, architecture engagements, troubleshooting, and high-impact projects.

The value in this position comes from your ability to:

• Understand how network traffic flows

• Understand the security impact of network design decisions

• Configure and harden firewalls

• Troubleshoot complex problems

• Analyze firewall policies and rule sets

• Understand routing

• Design secure segmentation

• Design secure connectivity

• Work across on-premises and cloud environments

• Develop repeatable engineering standards

• Make sound technical decisions

• Communicate those decisions clearly to customers and other engineers

What We’re Looking For

Candidates may range from developing engineers to highly experienced network security professionals.

We are looking for some combination of:

• Firewall configuration and troubleshooting experience

• Network security experience

• Strong TCP/IP fundamentals

• Layer 2 and Layer 3 networking knowledge

• Routing and switching knowledge

• VLAN and network segmentation experience

• NAT experience

• VPN experience

• WAN and Internet troubleshooting

• SD-WAN experience

• Microsoft Azure networking knowledge

• Hybrid cloud connectivity experience

• Security hardening experience

• Strong troubleshooting and analytical skills

• Strong communication skills

• Ability to create quality technical documentation

• Professional presence with customers

• Willingness to learn new technologies

• Willingness to travel when projects require it

You do not need to check every box to apply.

If you have strong networking fundamentals, enjoy security and troubleshooting, and want to grow deeper into firewall and cloud networking technologies, we want to hear from you.

Technologies That Will Get Our Attention

Firewall & Security

• Fortinet / FortiGate

• SonicWall

• Palo Alto Networks

• Cisco Meraki

• Sophos

• Cisco security technologies

• VPN

• SD-WAN

• Network segmentation

• High availability

Networking

• Extreme Networks

• Cisco

• Cisco Meraki

• HPE Aruba

• Juniper Mist

Microsoft Azure

• Azure Virtual Networks

• Azure Firewall

• Network Security Groups

• Azure VPN Gateway

• Azure routing

• Hybrid connectivity

• Azure private networking

Certifications

Certifications are helpful but are not required for every experience level.

Relevant certifications may include:

• CompTIA Network+

• CompTIA Security+

• CCNA

• CCNP Enterprise

• CCNP Security

• Fortinet certifications

• SonicWall certifications

• Palo Alto Networks certifications

• Cisco Meraki certifications

• Microsoft Azure certifications

• AZ-700: Designing and Implementing Microsoft Azure Networking Solutions

• Other networking, security, or cloud certifications

Demonstrated technical ability, troubleshooting skills, security mindset, and willingness to learn are just as important as certifications.

Who Will Excel Here

This position is a strong fit for someone who:

• Enjoys firewall and network security engineering

• Thinks about how to make environments more secure, not simply how to make them work

• Likes figuring out why traffic is or is not flowing

• Enjoys troubleshooting difficult networking problems

• Wants deeper exposure to Microsoft Azure networking

• Enjoys working across multiple technologies and manufacturers

• Wants to develop high-quality professional-services solutions

• Can communicate effectively with sophisticated customers and technical teams

• Takes pride in building repeatable, secure, well-documented solutions

• Wants increasing responsibility as their skills develop

Whether you are developing your network security career or already capable of designing complex firewall and hybrid-cloud environments, there is room to grow and make a significant impact at Advantage Technology.