Senior Network Engineer - Azure Cloud

At Slipstream, we work to streamline IT Support and provide managed solutions with a strategic consulting and global leadership management approach. Our solutions are designed exclusively for emerging pharma and biotech organizations.

Slipstream’s industry-leading solutions free clients from the demands of internal IT and allow them to rapidly advance their mission. Led by a leadership team that has been together for over 10 years, you will join a proven team, culture, and strategy to drive innovation within the IT outsourcing industry while developing your skillset with the opportunities for internal growth.

Slipstream IT is seeking an experienced Senior Network Engineer to design, build, and optimize secure Azure cloud network infrastructure for life sciences clients. Engaged as an independent contractor for a six-month, full-time hybrid engagement based in our Hampton, NJ office, you will lead hands-on delivery of enterprise-grade hybrid and cloud networking, including landing zone connectivity, hybrid integration, network security, and automation. You will work alongside Slipstream delivery leads and client IT teams in regulated (GxP) environments where documentation, change control, and audit readiness matter as much as technical execution.

Responsibilities

• Architecture & Design: Design and implement Azure network topologies (hub-and-spoke and/or Virtual WAN), including VNets, subnetting, peering, user-defined routes, and IP address management aligned to Azure landing zone best practices.
• Hybrid Connectivity: Build and maintain ExpressRoute and site-to-site/point-to-site VPN connectivity between on-premises data centers, lab and manufacturing sites, and Azure, including BGP routing and redundancy design.
• Network Security: Configure and manage Azure Firewall and/or third-party NVAs, NSGs and ASGs, Application Gateway with WAF, Azure Front Door, DDoS protection, and Private Endpoints/Private Link to enforce segmentation and zero-trust principles.
• DNS & Traffic Management: Design hybrid name resolution using Azure Private DNS and DNS Private Resolver; implement load balancing and traffic routing for business-critical applications.
• Infrastructure as Code: Develop and maintain reusable network deployments using Terraform and/or Bicep, integrated with Azure DevOps or GitHub Actions CI/CD pipelines.
• Monitoring & Operations: Implement network monitoring and diagnostics using Network Watcher, Azure Monitor, and Log Analytics; troubleshoot connectivity, latency, and routing issues and drive root-cause resolution.
• Migration Support: Plan and execute network readiness for workload migrations to Azure, including cutover planning, maintenance windows, and rollback procedures.
• Governance & Compliance: Apply Azure Policy and security baselines; produce design specifications, configuration records, and test evidence to support infrastructure qualification and change control in GxP environments.
• Knowledge Transfer: Create runbooks, network diagrams, and as-built documentation, and transition operational ownership to client IT teams by engagement close.

Required Qualifications

• 8 years of enterprise network engineering experience, including 4 years designing and supporting Azure networking in production.
• Deep hands-on expertise with ExpressRoute, VPN Gateway, VNet peering, UDRs, and BGP routing.
• Strong experience with Azure Firewall and/or enterprise firewall platforms (e.g., Palo Alto, Fortinet, Check Point), including NVA deployments in Azure.
• Proficiency with Terraform and/or Bicep, plus scripting in PowerShell, Azure CLI, or Python.
• Solid understanding of TCP/IP, DNS, DHCP, load balancing, network segmentation, and zero-trust architecture.
• Proven ability to work independently as a contractor, managing your own time and deliverables with minimal supervision.
• Able to work on-site in Hampton, NJ four days per week (Monday through Thursday) for the full engagement.
• Authorized to work in the United States without sponsorship.

Preferred Qualifications

• Microsoft Certified: Azure Network Engineer Associate (AZ-700); Azure Solutions Architect Expert (AZ-305) or Azure Administrator (AZ-104).
• Cisco CCNP/CCIE, Palo Alto PCNSE, or equivalent networking certifications.
• Experience in life sciences or other regulated industries, including familiarity with GxP, computer system validation (CSV), and 21 CFR Part 11 considerations.
• Experience with Azure Virtual WAN, SD-WAN integration, Microsoft Entra ID, and Microsoft Defender for Cloud.
• Background supporting connectivity for laboratory, manufacturing, or clinical systems.

Key Competencies

• Technical Ownership: Takes end-to-end accountability for designs, from whiteboard through deployment and documentation.
• Security Mindset: Builds with least privilege, segmentation, and auditability as defaults, not afterthoughts.
• Problem Solving: Diagnoses complex, cross-domain connectivity issues quickly and methodically.
• Client Communication: Explains technical trade-offs clearly to client IT leaders, quality teams, and non-technical stakeholders.
• Documentation Discipline: Produces clear, accurate, inspection-ready artifacts suitable for regulated environments.

Work Enviroment

• Hybrid, full-time engagement: on-site in the Hampton, NJ office Monday through Thursday, and remote on Fridays, with availability during core Eastern Time business hours.
• Occasional evening or weekend work may be needed for scheduled maintenance windows and cutovers.
• As an independent contractor, you determine how the work is performed to meet agreed deliverables, supply your own computer and remote workspace, and are responsible for your own taxes, insurance, and benefits. Client system access is provisioned per client security requirements.
• Engagement terms, rate, and deliverables are governed by a separate consulting agreement and statement of work.

Slipstream is an equal opportunity employer that is committed to diversity and inclusion in the workplace. We prohibit discrimination and harassment of any kind based on race, color, sex, religion, sexual orientation or identity, national origin, genetic information, pregnancy, or any other protected characteristic as outlined by federal, state, or local laws. Slipstream makes hiring decisions based solely on qualifications, merit, and business needs at the time.

This job description may not be inclusive of all assigned duties, responsibilities, or aspects of the job described, and may be amended at any time at the sole discretion of the Employer