Cloud Engineer

DescriptionWe are seeking an experienced Cloud Engineer to provide day-to-day operational support for our enterprise network and cloud infrastructure. This role is essential to maintaining the performance, security, and reliability of our hybrid environment, which spans both on-premises systems and Azure cloud services. The ideal candidate will have strong hands-on experience with Azure networking, security, and infrastructure components, and will be responsible for monitoring, troubleshooting, and optimizing cloud and network operations. You’ll collaborate closely with infrastructure and security teams to ensure seamless connectivity, secure access, and efficient resource management across the organization. This position operates within an Agile environment, so familiarity with Agile methodologies is important. The candidate should be comfortable participating in daily stand-ups, weekly sprint planning, and regular retrospectives, contributing to a fast-paced and collaborative team culture focused on continuous improvement and delivery.What you will do:Provide operational support for enterprise network infrastructure (on-prem and Azure)Manage Azure components: VNets, NSGs, Application Gateways, Azure Firewall, ExpressRouteOperate and enhance an Azure Hub-and-Spoke landing zone (VNets/Subnets, NSGs/ASGs, UDRs, routing).Administer Azure Firewall policies, forced routing/egress control, and logging/diagnostics.Implement and maintain Private Endpoints/Private Link and Private DNS Zones for private-only service access.Manage hybrid connectivity and remote access using VPN Gateway (Site-to-Site + Point-to-Site) and ExpressRoute (if applicable).Monitor and troubleshoot network and connectivity using Azure Monitor, Log Analytics, and Network Watcher.Own Disaster Recovery and Backup using Recovery Services Vault (Azure Backup + Azure Site Recovery), including DR testing and runbooks.Drive secure-by-default cloud networking standards, documentation, and continuous optimization.Collaborate with infrastructure and security teams on changes, upgrades, patching, and incident response.What you will need:Around 5+ years in a Network Engineer or similar roleStrong understanding of TCP/IP, LAN/WAN, DNS, DHCP, VLANs, routing protocols (BGP, OSPF), IPsec VPNHands-on Azure networking: VNets, NSGs, UDRs, Azure Firewall, Application Gateway/WAF, VPN Gateway (P2S/S2S), Private Link/DNS.DR/BC experience with Recovery Services Vault, Azure Backup policies/restores, and Azure Site Recovery failover/failback.Virtualization: VMware, Pure Storage, Windows/LinuxSecurity: Sentinel One, DUOVPN/Remote Access: IvantiFamiliarity with Azure Monitor, Network Watcher, WiresharkExperience with ARM templates or Terraform is a plusCurrent authorization to work in the United States without the need for visa sponsorship now or in the future (e.g., F-1 STEM OPT, H-1B, TN, O-1, I-485J portability, etc.What we offer you:Competitive bonus programMedical/Dental/Vision insurance, Life Insurance, Disability, Health Savings Account, Dependent Care Reimbursement, Commuter Benefits, 401k match program, and voluntary insurance optionsGenerous time off/flexible work arrangementsReimbursement for admission fees and study material for professional designationsRequirementsAnsible, AWS Technologies, Auto Scaling, Amazon Web Services (AWS), Amazon EC2, Azure Active Directory, Microsoft 365 EnterpriseJob typePerm