Cloud Platform Network Engineer

Cloud Platform Network Engineer

We are recruiting for a Platform Network Engineer with strong troubleshooting experience to join one of our Insurance clients on a 6-month contract.

Inside IR35

Hybrid

Responsibilities:

• Troubleshoot connectivity, routing, DNS, and performance issues across Azure and hybrid environments, perform root cause analysis, and document findings and fixes.
• Resolve issues with existing network deployments, including virtual networks, subnets, peering, route tables, NSGs, gateways, firewalls, Private Endpoints, and DNS.
• Respond to and resolve support tickets and service requests related to Azure networking, working within the team's intake, change, and escalation processes.
• Make routine changes to existing Terraform-managed network resources through the team's established pull request and pipeline process, and flag manual changes or configuration drift to the platform engineering team.
• Help maintain and troubleshoot the CI/CD pipelines in GitHub Actions or Azure DevOps that validate, plan, and deploy network changes, following the team's pull request review and approval processes.
• Support and troubleshoot hub-and-spoke and Azure Virtual WAN topologies, including user-defined routes, BGP, Azure Route Server, and NAT Gateway.
• Support hybrid connectivity, including site-to-site and point-to-site VPN and ExpressRoute, monitoring gateway health and assisting with incident response alongside the Network Operations team and carriers.
• Maintain name resolution across Azure and on-premises using Azure DNS, Private DNS zones, and Azure DNS Private Resolver, including the private DNS integration required for Private Endpoints.
• Implement private access to Azure PaaS services using Private Endpoints, Private Link service, and service endpoints, and define the standard patterns application teams consume through self-service IaC modules.
• Automate repetitive operational tasks using PowerShell, Python, or Azure CLI, and use AI-assisted tools such as GitHub Copilot or Claude to speed up troubleshooting, scripting, and documentation, validating all outputs for accuracy and security.
• Document runbooks, troubleshooting guides, and known-issue write-ups, and communicate ticket and incident status clearly to technical and non-technical stakeholders.

Required Qualifications:

• Hands-on experience in network, cloud, or platform engineering, including at least 4 years designing and operating networks in enterprise Microsoft Azure environments.
• Working familiarity with Terraform, including reading existing code and modules, making routine changes, and reviewing plan output.
• Experience working with CI/CD pipelines for infrastructure (GitHub Actions or Azure DevOps), including submitting changes through pull requests and approval gates.
• Scripting skills in PowerShell, Python, or Azure CLI sufficient to automate routine tasks and assist with troubleshooting.
• Strong hands-on experience with Azure networking, including virtual networks, peering, hub-and-spoke and Virtual WAN, user-defined routes, BGP, and NAT Gateway.
• Solid foundation in core networking principles, including TCP/IP, subnetting, routing protocols, DNS, load balancing, and VPN and IPsec technologies.
• Experience troubleshooting with Azure Network Watcher, VNet flow logs, and Azure Monitor, including creating alerts and dashboards.
• Microsoft Certified: Azure Network Engineer Associate (AZ-700). Other Azure certifications such as AZ-104 or AZ-500, or the HashiCorp Certified: Terraform Associate, are a plus.
• Experience with Terraform Cloud or Terraform Enterprise.
• Experience with GitHub Enterprise, including reusable workflows and environments.
• Familiarity with Bicep or ARM templates, and with managing coexistence or migration between IaC tools.
• Experience with third-party network virtual appliances (e.g., Palo Alto Networks, Fortinet, Cisco) deployed in Azure.
• Experience in a regulated industry, such as financial services, insurance, or professional services.
• Experience working within DevOps, SRE, and Agile delivery models.

Guidant, Carbon60, Lorien & SRG - The Vertage Group Portfolio are acting as an Employment Business in relation to this vacancy.