Azure Network Engineer

Title: Azure Network Engineer

Duration: FTE/Permanent

Location: Mahwah, NJ

Salary: 120-140k

Position Overview:

We are seeking an experienced Azure Network Engineer with strong expertise in Palo Alto Networks technologies to design, deploy, and manage secure, high-performing network infrastructure across a hybrid cloud environment. This role focuses on building and supporting a scalable Azure networking solution while ensuring seamless integration with Palo Alto firewalls and security services.

Key Responsibilities:

• Design, implement, and maintain secure and resilient network architecture using Microsoft Azure networking service (VNets, NSGs, VPN Gateways, ExpressRoute, Azure Firewall, Load Balancers) and Palo Alto Network platform (NGFW, Panorama, Prisma Access, SD-WAN).
• Configure and manage security policies, NAT rules, VPNs (IPSec/SSL), and advanced routing across cloud and on-prem environments.
• Deploy and manage Azure network components including Application Gateway, Azure Front Door, Traffic Manager, and DDoS protection.
• Develop and enforce Zero Trust and micro-segmentation strategies integrated with Azure Active Directory and role-based access controls.
• Monitor and optimize network performance, connectivity, and security using Azure Monitor, Network Watcher, Azure Sentinel, and Palo Alto monitoring tools.
• Troubleshoot complex network and security issues across a hybrid infrastructure and implement permanent resolutions.
• Support migrations and connectivity between on-premises data centers and Azure cloud environments.
• Maintain detailed network design documentation, operational procedures, and configuration standards.
• Collaborate with infrastructure, security, and cloud engineering teams to ensure network reliability, scalability, and compliance with organizational standards.
• Stay current with evolving Azure and Palo Alto technologies, continuously enhancing technical knowledge through training and certification.
• Support internal lab environments for testing, validation, and proof-of-concept development.

Skills & Experience Requirements:

• Minimum 4 years of hands-on experience in enterprise network engineering or cloud network administration.
• Strong knowledge of Azure networking (VNets, NSGs, VPN Gateway, ExpressRoute, Load Balancers, Azure Firewall).
• Expertise with Palo Alto Networks firewalls and related technologies (NGFW, Panorama, Prisma Access, SD-WAN).
• Solid understanding of IP routing protocols (BGP, static routing, NAT) and tunneling/encryption protocols (SSL/TLS, IPSec, GRE).
• Experience integrating Azure AD, MFA, and authentication technologies such as RADIUS and LDAP.
• Proficiency in managing certificates, PKI, and secure communication channels.
• Familiarity with infrastructure automation or scripting for network configuration (PowerShell, Terraform, or ARM templates preferred).
• Excellent troubleshooting, analytical, and communication skills with the ability to work collaboratively across technical teams.
• Experience with other security or networking platforms such as Fortinet, Check Point, or AWS networking is a plus.
• Modern Palo Alto and Microsoft certifications required