Azure Cloud Configuration Network Engineer

Revolutional delivers advanced technology solutions and mission support to federal agencies across civilian, health, and national security environments. We apply modern capabilities, including AI/ML, cloud, cybersecurity, and IT modernization to solve complex challenges, enable faster and more secure operations, and drive measurable mission outcomes. We are redefining how federal technology gets built and delivered by operating with a product mindset, prioritizing speed, ownership, and execution over bureaucracy. Title Azure Cloud Configuration Network Engineer Location Onsite (Washington, D.C.) Terms Full-time Salary 145k - 175k DOE Clearance Active Top Secret with SCI eligibility required Citizenship U.S. citizenship required Travel 0-10% Position Description Revolutional is seeking a Cloud Configuration Network Engineer with deep expertise in Microsoft Azure networking to configure, secure, and maintain enterprise network infrastructure across Azure environments. This role is hands‑on: the engineer will own day‑to‑day configuration, troubleshooting, and lifecycle management of Azure networking components, working closely with security, systems, and application teams to support reliable, well‑documented network operations. What You’ll Do Configure and maintain core Azure networking components: Virtual Networks (VNets), subnets, VPN Gateways, ExpressRoute circuits, and Virtual WAN. Configure and manage Network Security Groups (NSGs), Application Security Groups (ASGs), Azure Firewall, and Web Application Firewall (WAF) policies to enforce segmentation and security controls. Implement and maintain hybrid connectivity between on‑premises data centers and Azure via Site-to-Site VPN, ExpressRoute, and Virtual WAN. Configure Azure Load Balancer, Application Gateway, Front Door, and Traffic Manager for high availability and traffic distribution. Manage DNS configuration (Azure DNS, Private DNS Zones) and IP address management (IPAM) across Azure subscriptions. Deploy and maintain Private Link / Private Endpoint configurations to secure connectivity to PaaS services. Configure and maintain routing (BGP, route tables, user‑defined routes) across hub‑and‑spoke and Virtual WAN topologies. Monitor network health, performance, and security posture using Azure Network Watcher, Azure Monitor, and Log Analytics; troubleshoot connectivity, latency, and routing issues. Develop and maintain Infrastructure-as-Code (ARM templates, Bicep, or Terraform) for repeatable, auditable network configuration changes. Participate in change management processes: documenting configurations, network diagrams, and standard operating procedures. Respond to and resolve network incidents and service requests within defined SLAs. Collaborate with security and infrastructure teams to support network design for new workloads, migrations, and capacity changes. What You Bring (Requirements) Active Top Secret (TS) clearance with SCI eligibility. Must be a U.S. citizen. Bachelor's degree in a related technical field, or equivalent professional experience. 5+ years overall network engineering experience. 3+ years of hands‑on experience configuring, administering, and troubleshooting Microsoft Azure networking environments. Demonstrated experience configuring Azure VNets, subnets, NSGs, ExpressRoute, VPN Gateway, and Azure Firewall. Solid understanding of core networking fundamentals: TCP/IP, routing, switching, DNS, DHCP, BGP, and VPN protocols (IPsec/IKEv2). Experience configuring and troubleshooting hybrid connectivity between on‑premises and Azure environments. Experience with Infrastructure-as-Code tools (ARM templates, Bicep, or Terraform) for network configuration and change control. Working knowledge of network security best practices, including segmentation, least‑privilege access, and firewall policy management. Security+ Certification. Nice To Have (Differentiators) Microsoft Certified: Azure Network Engineer Associate or Azure Administrator Associate. Experience with Azure Virtual WAN, Azure Front Door, or multi‑region network architectures. Experience integrating third‑party network/security appliances (e.g., Palo Alto, Cisco, Fortinet) with Azure. Scripting experience (PowerShell, Python, or Azure CLI) for network automation and configuration validation. Experience supporting federal government, regulated, or compliance‑driven environments (FedRAMP, NIST 800-53, etc.), if applicable to this role. Our Culture & Recognitions Recognized as a Top 20 "Best Place to Work in Virginia" Recipient of Department of Labor's HireVets Gold Medallion Great Place to Work Certification for five years running A Virginia Chamber of Commerce Fantastic 50 company A Northern Virginia Technology Council Tech 100 company Inc. 5000 list of fastest growing companies for eleven years Two-time SBA SBIR Tibbett's Award winner Virginia Values Veterans (V3) Certification Benefits Traditional and HSA‑eligible medical insurance plans 100% employer‑paid dental and vision insurance options 100% employer‑sponsored STD, LTD, and life insurance 5% 401(k) company matching Flexible‑schedules and teleworking options Paid holidays and PTO Accrual Plans Paid Parental Leave Professional development and career growth opportunities Team and company‑wide events, recognition, and appreciation-- and so much more! Check out our Revolutional | LinkedIn to find out a little more about who we are and if we are the right next step for your career! Revolutional is an Equal Opportunity Employer providing equal employment opportunity to all employees and applicants for employment without regard to race, color, religion, national origin, age, gender, gender identity, sexual orientation, disability, or genetics. Revolutional does and will take affirmative action to employ and advance in employment individuals with disabilities and protected veterans. To perform the above job successfully, an individual must possess the knowledge, skills, and abilities listed; meet the education and work experience required; and must be able to perform each essential duty and responsibility satisfactorily. Other duties in addition to those listed may be assigned as necessary to meet business needs. Reasonable accommodation will be made to enable an applicant with a disability to successfully apply for and/or perform the essential duties of the job. If you are in need of an accommodation, please contact View email address on click.appcast.io. #J-18808-Ljbffr Revolutional