Senior Azure Government Cloud Network Engineer

Salary: $135,200 - 145,600 per year Requirements:

• Bachelors degree.
• Proven expertise designing Azure Virtual WAN (VWAN) architectures with Routing Intent, Secured Virtual Hubs, Forced Tunneling, and complex User-Defined Routes (UDRs).
• Advanced Border Gateway Protocol (BGP) engineering experience across multiple Azure ExpressRoute circuits and VPN gateways in highly available enterprise environments.
• Strong Terraform expertise for building declarative, production-grade, immutable, multi-environment architectures.
• Deep experience with Azure Government Cloud, including its constraints, endpoint differences, and compliance parameters.
• Strong understanding of microservices and container networking, including service-to-service communication, ingress controllers, and overlay and underlay networking such as Azure CNI.
• Experience working in distributed, multi-location teams using Scaled Agile frameworks such as SAFe or Scrum-at-Scale, and using Azure DevOps to link infrastructure work items with application features.
• Proficiency with Azure Network Watcher, Traffic Analytics, and Azure Monitor for analyzing database lag, CPU and memory telemetry, and errors under simulated traffic loads.
• Advocates for shift-left practices and codified infrastructure validation; understands Git workflows, including draft pull requests, and how automated network rules support product readiness testing.
• High standards for infrastructure deployment quality and preventing architectural defects from reaching subsequent environments.

• Design and manage global Azure Virtual WAN architectures, using secured virtual hubs integrated with security partners or Azure Firewall to govern cloud-native traffic centrally.
• Apply VWAN Routing Intent and Routing Policies to direct private and internet-bound traffic through security appliances.
• Engineer resilient, multi-site Azure ExpressRoute paths using BGP communities, multi-exit discriminators, and AS-path prepending to establish predictable failover routes.
• Create User-Defined Routes and BGP policies for forced tunneling, routing branch, cloud, and edge traffic through designated inspection points while avoiding asymmetric-routing failures.
• Define and manage routing fabrics, BGP peering, VWAN configurations, hub policies, and route matrices through modular Terraform templates.
• Govern Terraform state securely, detect configuration drift, and apply policy-as-code validations, such as Azure Policy or OPA/Rego, to prevent unauthorized manual changes.
• Integrate network infrastructure as code into Azure DevOps CI/CD pipelines, with automated linting, static security analysis, and environment-specific compliance checks on Git check-in.
• Architect and maintain Azure Government Cloud environments in accordance with applicable federal security frameworks, including FedRAMP High, DoD SRG Impact Levels 4 and 5, and CJIS.
• Enforce zero-trust micro-segmentation through Network Security Groups and Application Security Groups defined as code, isolating microservices and limiting lateral threats.
• Manage high-assurance cryptographic gateways, cross-domain solutions, and dedicated ExpressRoute Government circuits that connect government enclaves and distributed development sites.
• Keep networking layouts and routing boundaries consistent across pre-production and production through automated nightly deployment pipelines.
• Configure Azure Private DNS and localized routing as code to support API contract testing and service virtualization while keeping early testing isolated for distributed teams.
• Collaborate with distributed engineering teams, Product Leads, Quality Leads, and Application Leads across Agile release trains; map infrastructure needs to Azure DevOps user stories and maintain requirements traceability.
• Provision high-throughput network segments for automated reliability, scaling, load, stress, and chaos testing.
• Design discreet routing paths and backend connections for dark launches of microservices and data migrations on production infrastructure.
• Configure Azure Application Gateway and Azure Front Door targeting filters so distributed QA teams and Product Managers can securely test features with production data while keeping them hidden from standard users.
• Secure and optimize low-latency Azure Private Link pathways across geographic deployment regions.
• Tune routing tables, global traffic managers, and DNS TTLs to support automated, rapid traffic rollback when telemetry indicates issues such as spikes or memory leaks.

• API
• Architect
• Azure
• Backend
• CI/CD
• Cloud
• DevOps
• Firewall
• Git
• Support
• Network
• Security
• Terraform
• VPN
• microservices
• Matrix
• TDD
• UX UI Design

More:

We are seeking a Senior Azure Government Cloud Network Engineer to serve as an architectural anchor for our autonomous microservices platform. The role focuses on building and maintaining automated, immutable software-defined networks that support zero-trust deployment, reduce configuration drift, and keep environments consistent. You will work with distributed teams in a multi-location Scaled Agile framework. The posting describes the position as onsite in Omaha, Nebraska, and also lists it as telecommute. It is a contract role, with a stated schedule of 9 a.m. to 5 p.m. and compensation of $65–$70 per hour.

last updated 42 week of 2026