- Design and implement Azure Virtual Networks (VNets), subnetting strategies, and IP address management (IPAM) aligned with enterprise landing zone standards.
- Architect and manage Hub-and-Spoke and Virtual WAN topologies, including VNet peering, route tables (UDRs), and network segmentation.
- Deploy and maintain Azure Firewall, Network Security Groups (NSGs), and Application Security Groups (ASGs) to enforce layered security controls.
- Configure and operate Azure Express Route, Site-to-Site VPN, and Point-to-Site VPN gateways for secure, resilient connectivity.
- Implement Private Link, Private Endpoints, and Service Endpoints to secure PaaS connectivity and eliminate public exposure of services.
- Manage Azure Load Balancer, Application Gateway (including WAF), Front Door, and Traffic Manager for traffic distribution and global routing.
- Own DNS architecture across Azure Private DNS Zones, Azure DNS, and hybrid resolution scenarios (conditional forwarding, DNS Private Resolver).




- Monitor and troubleshoot network performance and connectivity issues using Azure Network Watcher, Connection Monitor, NSG Flow Logs, and Azure Monitor.
- Apply Infrastructure as Code (Terraform, Bicep, or ARM templates) to provision and version-control network resources.
- Support cross-tenant and cross-subscription connectivity patterns, including integration with third-party or partner Azure environments.
- Partner with security and identity teams to align network controls with Zero Trust principles and organizational compliance requirements.
- Maintain up-to-date network documentation, topology diagrams, and standard operating procedures (SOPs).
- Provide input into disaster recovery and failover planning for network-dependent workloads.
- Act as a secondary point of contact for on-premises network considerations that affect hybrid cloud connectivity (firewall rules, routing, VPN/Express Route circuit coordination with on-prem network teams).

📌 Azure Network Engineer (Bengaluru)
🏢 TRIGENT SOFTWARE PRIVATE
📍 Bengaluru