Key Responsibilities

- Design and implement scalable, secure, and highly available network architectures across Azure and hybrid on-prem/cloud environments
- Architect Azure networking components including Virtual Networks (VNets), VNet peering, ExpressRoute, VPN Gateways, Azure Firewall, Application Gateway, Load Balancers, and Private Link
- Define and enforce network segmentation, hub-and-spoke or Virtual WAN topologies, and Zero Trust network principles
- Discuss and implement network security architecture in collaboration with the security team (NSGs, Azure Firewall policies, DDoS protection, WAF)
- Develop and maintain network documentation, standards, and reference architectures
- Engineer and implement migration and modernization initiatives moving legacy network infrastructure to cloud-native solutions
- Evaluate and implement Infrastructure-as-Code practices for network provisioning (Terraform, Bicep, ARM templates)
- Partner with cloud architects, DevOps, and security teams on cross-functional infrastructure initiatives
- Manage relationships with Microsoft support/account teams
- Own incident response and root-cause analysis for critical network outages
- Stay current with Azure networking roadmap and emerging technologies, recommending adoption where relevant

Required Qualifications





- 5 - 11 years of experience in network engineering/architecture preferably focused on Azure networking
- Deep expertise in Azure networking services: VNets, ExpressRoute, VPN Gateway, Azure Firewall, Virtual WAN, Load Balancer, Application Gateway, Private Endpoints
- Strong understanding of routing protocols (BGP, OSPF), TCP/IP, DNS, and network security principles
- Hands-on experience with hybrid connectivity (ExpressRoute, Site-to-Site VPN) between on-prem data centers and Azure
- Proficiency with Terraform
- Solid understanding of network security concepts: firewalls, NSGs, WAF, DDoS protection, Zero Trust architecture
- Experience with monitoring/observability tools (Azure Monitor, Network Watcher, or third-party tools like SolarWinds, ThousandEyes)
- Robust scripting skills (PowerShell, Python, or Bash) for automation
- Excellent communication skills with ability to present architecture decisions to technical and non-technical stakeholders
- Proven experience leading or mentoring a team

Preferred Qualifications

- Microsoft certifications: Azure Network Engineer Associate (AZ-700), Azure Solutions Architect Expert (AZ-305)
- Additional certifications: CCNP/CCIE, CompTIA Network+, or equivalent
- Experience with container networking (AKS networking, CNI plugins)
- Background in Healthcare industry preferable with compliance requirements (HIPAA, HITRUST)

📌 Azure Network Engineer (Pune)
🏢 Cognizant
📍 Pune