Cloud Network Engineer II

Security represents the most critical priorities for our customers in a world awash in digital threats regulatory scrutiny and estate complexity. Microsoft Security aspires to make the world a safer place for all. We want to reshape security and empower every user customer and developer with a security cloud that protects them with end to end simplified solutions. The Microsoft Security organization accelerates Microsofts mission and bold ambitions to ensure that our company and industry is securing digital technology platforms devices and clouds in our customers heterogeneous environments as well as ensuring the security of our own internal estate. Our culture is centered on embracing a growth mindset a theme of inspiring excellence and encouraging teams and leaders to bring their best each doing so we create life-changing innovations that impact billions of lives around the world.

As part of the Identity and Network Access organization ART delivers foundational security services that establish trust across the entire ecosystemfrom PKI and certificate management to secure software distribution and critical network infrastructure. As a *Cloud Network Engineer* on the ART team you will design automate deploy and operate highly secure network infrastructure supporting mission-critical services and High Security Environments (HSE). Youll work on enterprise-scale systems across global datacenters collaborating with cross-functional engineering teams to build and maintain the trusted backbone that secures Microsofts most sensitive operations. This role offers the opportunity to deepen your expertise in secure cloud networking automation and zero-trust infrastructure while working alongside industry-leading security and networking experts to solve complex engineering challenges.

#MSFTSecurity

Lead the design review and implementation of secure network architectures infrastructure code and security controls identifying risks and preventing issues before production deployment.

Design and enhance telemetry monitoring and analytics solutions to detect service anomalies identify trends and accelerate troubleshooting of complex live-site incidents.

Automate network deployment validation and operational processes to reduce human error improve service availability and enforce engineering standards across secure environments.

Define and implement secure connectivity between Azure Secure Datacenters enabling resilient hybrid services while partnering with service owners to deliver highly available and easy-to-operate solutions.

Design deploy and support enterprise-scale network and storage infrastructure collaborating with Network Security Identity and Storage engineering teams to deliver secure private cloud solutions.

Analyze operational data to identify gaps assess customer impact develop new validation methodologies and contribute to technical documentation and knowledge sharing for datacenter operations.

Partner with internal engineering teams and external vendors to troubleshoot network infrastructure support hardware lifecycle activities and deliver secure scalable networking solutions that support Microsofts Authorization and Root of Trust (ART) mission.

Required/Minimum Qualifications

Masters degree in Electrical Engineering Optical Engineering Computer Science Information Technology or a related field and 1 year of experience in network design development and automation; or Bachelors degree in Electrical Engineering Optical Engineering Computer Science Information Technology or a related field and 2 years of experience in network design development and automation; or Equivalent practical experience.

Preferred Qualifications

Doctoral degree in Electrical Engineering Optical Engineering Computer Science Information Technology or a related field; or Masters degree in Electrical Engineering Optical Engineering Computer Science Information Technology or a related field and 3 years of experience in network design development and automation; or Bachelors degree in Electrical Engineering Optical Engineering Computer Science Information Technology or a related field and 5 years of experience in network design development and automation; or equivalent practical experience.

Experience designing and implementing enterprise network architectures for hybrid cloud and on-premises environments.

Proficiency in Infrastructure as Code (IaC) methodologies with hands-on experience using Ansible and automation frameworks. Strong understanding of IP networking fundamentals including routing and network protocols such as BGP OSPF MPLS TCP/IP UDP IPsec MACsec and

Demonstrated expertise in troubleshooting across the OSI model including Layer 2/3 switching and routing as well as Layer 7 application firewalls.

Experience designing implementing and supporting application load balancing solutions including F5 BIG-IP LTM and Azure Load Balancer (HLB) technologies.

Proficiency in enterprise automation using one or more scripting and programming languages including PowerShell Python Perl C# YAML/Ansible or equivalent technologies.

Experience deploying and operating large-scale datacenter infrastructure and enterprise networking solutions including NAS and SAN environments.

Proven ability to independently lead projects from planning through implementation and operational handoff with minimal supervision.

Strong collaboration skills with the ability to mentor teammates share technical knowledge and work effectively across engineering security storage and service teams to drive business and technology decisions.

Excellent analytical verbal and written communication skills with the ability to clearly document designs operational procedures and technical recommendations.

Qualifications - Other Requirements:

Ability to meet Microsoft customer and/or government security screening requirements are required for this role. These requirements include but are not limited to the following specialized security screenings: Microsoft Cloud Background Check: This position will be required to pass the Microsoft background and Microsoft Cloud background check upon hire/transfer and every two years thereafter.

Cloud Network Engineering IC3 - The typical base pay range for this role across the U.S. is USD $102100 - $202200 per year. There is a different range applicable to specific work locations within the San Francisco Bay area and New York City metropolitan area and the base pay range for this role in those locations is USD $133800 - $219200 per year.

Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:
position will be open for a minimum of 5 days with applications accepted on an ongoing basis until the position is filled.

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age ancestry citizenship color family or medical care leave gender identity or expression genetic information immigration status marital status medical condition national origin physical or mental disability political affiliation protected veteran or military status race ethnicity religion sex (including pregnancy) sexual orientation or any other characteristic protected by applicable local laws regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process read more about requesting accommodations.

Required Experience:

IC