Senior Azure Cloud & Network Engineer

Job SummaryThe Senior Azure Cloud & Network Engineer is responsible for implementing, supporting, and optimizing secure, scalable, and highly available Microsoft Azure infrastructure, with a strong focus on Azure networking, hybrid connectivity, automation, and cloud infrastructure engineering.This role works hands-on with Azure networking services, hybrid connectivity between on-premises and cloud environments, Infrastructure as Code (IaC), CI/CD pipelines, and cloud platform services. The position partners closely with infrastructure, security, DevOps, and application teams to deliver reliable, repeatable, and secure cloud environments that support enterprise and public-facing applications.The primary focus of this role is Azure cloud networking, with additional responsibility for traditional enterprise networking, infrastructure automation, troubleshooting, and operational support in a large, regulated environment.Minimum QualificationsEducationBachelor’s degree in Information Technology, Computer Science, or a related field, or equivalent relevant work experience.Experience7+ years of experience in cloud infrastructure, network engineering, or related infrastructure roles.Significant hands-on experience with Microsoft Azure, particularly Azure networking and hybrid connectivity.Strong understanding of TCP/IP, BGP, OSPF, VLANs, DNS, DHCP, routing, and network segmentation.Hands-on experience supporting hybrid on-premises and Azure cloud environments.Experience with major cloud providers, with Microsoft Azure strongly preferred.Experience using Infrastructure as Code and automation tools such as Terraform, Bicep, ARM templates, PowerShell, Python, or Azure CLI.Experience with CI/CD pipelines and modern deployment practices.Proven ability to work effectively in regulated or compliance-driven environments.Strong troubleshooting, documentation, and analytical skills.Ability to adapt within a large enterprise environment as technologies, processes, and business priorities evolve.Licensure, Certification, and/or RegistrationPreferred certifications include:Microsoft Certified: Azure Network Engineer Associate (AZ-700)Microsoft Certified: Azure Solutions Architect Expert (AZ-305)Cisco CCNP Enterprise or equivalent networking certificationFortinet NSE certificationsCompTIA Network+ or equivalentCertifications are preferred but may be substituted by equivalent hands-on experience.Primary Job FunctionsImplement, support, and optimize enterprise Azure cloud infrastructure and networking environments.Configure and manage Azure networking services, including Virtual Networks (VNets), subnets, routing, private connectivity, load balancing, DNS, VPN connectivity, and network security services.Support Azure networking technologies such as Azure Virtual WAN, Azure Virtual Network Manager, Azure Front Door, ExpressRoute, Private Link, Private Endpoints, Application Gateway, and Azure Firewall, as applicable.Build and support hub-and-spoke and other scalable Azure network topologies.Implement and maintain Azure Landing Zone components related to networking, identity integration, governance, and resource organization.Support secure hybrid connectivity between on-premises infrastructure and Azure using VPN, ExpressRoute, routing, and private connectivity technologies.Implement and support multi-region and highly available cloud network environments to enable disaster recovery and business continuity.Use Infrastructure as Code (IaC) tools such as Terraform and Bicep to provision and maintain cloud and network infrastructure.Build and support CI/CD pipelines used to deploy cloud infrastructure and networking changes.Create reusable automation, templates, scripts, and deployment patterns to improve consistency and reduce manual configuration.Work with development and DevOps teams to integrate cloud infrastructure and networking requirements into application deployment processes.Support cloud-native and platform services, including managed Azure services, containers, and event-driven technologies.Implement Zero Trust networking principles, including segmentation, identity-based access, secure connectivity, and least-privilege access controls.Monitor and troubleshoot complex Azure, hybrid cloud, and enterprise network connectivity issues.Perform root-cause analysis and resolve performance, availability, routing, DNS, security, and connectivity issues.Maintain technical documentation, network diagrams, configurations, operating procedures, and support documentation.Support regulatory and security compliance requirements, including SOC, PCI, state DOI, and NYDFS.Participate in technology upgrades, cloud migrations, network modernization efforts, and infrastructure improvement initiatives.Collaborate with infrastructure, security, DevOps, application, and vendor teams to implement technical solutions.Periodic Job FunctionsOther duties as assigned.Skills & Competencies RequiredAzure Cloud NetworkingStrong hands-on experience implementing and supporting Azure networking environments, including:Azure VNets and subnetsRouting and route tablesAzure Virtual WANAzure Virtual Network ManagerAzure Front DoorExpressRouteVPN GatewayPrivate Link and Private EndpointsApplication GatewayAzure Load BalancerAzure Firewall and network security controlsAzure DNSHub-and-spoke networkingNetwork segmentationHybrid Cloud NetworkingExperience implementing and supporting secure connectivity between on-premises environments and Azure, including VPN, ExpressRoute, routing, DNS, firewalls, and private connectivity.Enterprise NetworkingStrong understanding of:TCP/IPBGP and OSPFDNS and DHCPVLANsFirewalls and VPNsLAN/WANSD-WAN and SASE conceptsNetwork segmentationRouting and switching fundamentalsInfrastructure as Code & AutomationHands-on experience automating cloud infrastructure and networking using tools such as:TerraformBicepARM templatesPowerShellPythonAzure CLIGitExperience integrating infrastructure automation into CI/CD pipelines and source-control workflows.Azure DevOps & CI/CDExperience working with:Azure DevOpsGitHub or other Git-based source-control platformsCI/CD pipelinesAutomated testing and deploymentVersion-controlled infrastructureDeployment approvals and change managementCloud Platform EngineeringAbility to create and maintain reusable infrastructure templates, scripts, modules, and standardized deployment patterns that support application and development teams.Security & ComplianceKnowledge of:Zero Trust networkingIdentity-based access controlsNetwork segmentationSecurity monitoringSIEM integrationEDR, antivirus, ATP, IPS, and IDPSRegulatory and audit requirements such as SOC, PCI, state DOI, and NYDFSAbility to support compliance through appropriate technical controls, documentation, and evidence.Backup & RecoveryWorking knowledge of backup, recovery, disaster recovery, business continuity, and RPO/RTO concepts within cloud and hybrid environments.Technical TroubleshootingStrong ability to diagnose and resolve complex issues involving:Azure networkingRoutingDNSVPN and ExpressRoute connectivityFirewallsHybrid cloud environmentsPerformance and availabilityLogs and monitoringInfrastructure automation and deployment failuresProject & Work ManagementAbility to manage multiple technical initiatives, deadlines, vendors, and priorities while maintaining clear and accurate technical documentation.AdaptabilityAbility to learn and work with new technologies, tools, and processes while responding effectively to changing business and technical requirements.Critical ThinkingAbility to:Ask the right technical questionsAnalyze and assess technical informationIdentify assumptions and risksTroubleshoot methodicallyEvaluate alternative solutionsMake sound technical decisions in complex environmentsAdditional Information:Full benefit package including medical, dental, vision, life, company paid short/long term disability, 401(k), tuition assistance and more.The anticipated salary for this position is $110,000 - $125,000 per year, based on qualifications and experience.Recruitment UpdatesFortegra has recently been made aware of unauthorized communications regarding career opportunities by individuals not associated with Fortegra or our recruitment team. Fortegra will only contact you from the Fortegra domain address (@fortegra.com). If you receive a message from someone posing as a Fortegra recruiter via text message, WhatsApp, Telegram or other messaging platform, please report it as phishing and block the sender.Fortegra is not accepting unsolicited resumes from search firms for this position.Internal Notice: As part of our commitment to talent development, this position is open for internal promotion applications at the time of public posting.#LI-OnsiteJob SummaryRequisition Number: SENIO001535Job Category: Senior AssociateSchedule: Full-Time