Azure Network and Security Engineer

Responsibilities

• Design, deploy, and manage Azure network architectures including Hub-and-Spoke, Virtual WAN, VNets, subnets, peering, routing, and hybrid connectivity (ExpressRoute, Site-to-Site/Point-to-Site VPNs)
• Implement and manage Azure network security services including Azure Firewall, Web Application Firewall (WAF), DDoS Protection, NSGs, Private Endpoints, Private DNS, and Service Endpoints to secure cloud connectivity
• Deploy and manage Microsoft Defender for Cloud, Defender for Endpoint, and Microsoft Sentinel, developing detection rules, automation, threat hunting, and incident response capabilities
• Implement Azure security governance through Azure Policy, RBAC, security baselines, and compliance controls aligned with HIPAA, SOC 2, PCI-DSS, and NIST requirements
• Monitor and troubleshoot network and security environments using Azure
• Monitor, Network Watcher, Log Analytics, and Connection
• Monitor to ensure performance, availability, and security
• Conduct vulnerability assessments, support threat modeling, and coordinate remediation efforts across infrastructure and application teams
• Develop and maintain network security documentation, including architecture diagrams, firewall standards, data flows, and operational runbooks
• Partner with DevOps and cloud engineering teams to integrate security into CI/CD pipelines and advance DevSecOps practices

Languages