Azure Network Engineer

The Azure Network Engineer will design and implement all Azure networking components for the migration programme, including the core hub-and-spoke topology, ExpressRoute circuits to datacenters, DNS architecture, and security network controls.

• Design and deploy Azure hub-and-spoke network topology using Azure Virtual WAN or traditional hub VNets
• Provision and configure ExpressRoute circuits connecting datacenter to Azure Germany regions
• Configure Azure Firewall with network and application rule collections for all migrated workloads
• Manage DNS architecture: Azure Private DNS Zones, custom DNS resolvers, conditional forwarders
• Implement network segmentation using NSGs, ASGs, and Azure Firewall DNAT/SNAT rules
• Configure BGP routing between on-premises and Azure across ExpressRoute and VPN connections
• Support migration wave cutovers by executing DNS switchovers and validating network paths
• Monitor and troubleshoot network performance using Network Watcher and Azure Monitor

• 6+ years in enterprise network engineering
• 3+ years working with Azure networking services at scale
• Deep expertise in ExpressRoute, Azure Virtual WAN, VPN Gateway, and Azure Firewall
• Strong BGP and IP routing knowledge in hybrid cloud environments
• AZ-700 (Azure Network Engineer Associate) certification is mandatory
• Experience with on-premises network technologies: Cisco / Juniper / Fortinet

• AZ-104 (Azure Administrator) certification
• SD-WAN experience for branch connectivity integration
• Familiarity with DNSSEC, IPv6, and Zero Trust network access patterns
• German language skills preferred