Azure Cloud Configuration Network Engineer

Title:Azure Cloud Configuration Network Engineer

Location: Onsite (Washington, D.C.)

Terms: Full-time

Salary: 145k - 175k DOE

Clearance: Active Top Secret with SCI eligibility required

Citizenship: U.S. citizenship required

Travel: 0-10%

Position Description

Revolutional is seeking a Cloud Configuration Network Engineer with deep expertise in Microsoft Azure networking to configure, secure, and maintain enterprise network infrastructure across Azure environments. This role is hands-on: the engineer will own day-to-day configuration, troubleshooting, and lifecycle management of Azure networking components, working closely with security, systems, and application teams to support reliable, well-documented network operations.

What You'll Do

As a Azure Cloud Configuration Network Engineer you will:

• Configure and maintain core Azure networking components: Virtual Networks (VNets), subnets, VPN Gateways, ExpressRoute circuits, and Virtual WAN.
• Configure and manage Network Security Groups (NSGs), Application Security Groups (ASGs), Azure Firewall, and Web Application Firewall (WAF) policies to enforce segmentation and security controls.
• Implement and maintain hybrid connectivity between on-premises data centers and Azure via Site-to-Site VPN, ExpressRoute, and Virtual WAN.
• Configure Azure Load Balancer, Application Gateway, Front Door, and Traffic Manager for high availability and traffic distribution.
• Manage DNS configuration (Azure DNS, Private DNS Zones) and IP address management (IPAM) across Azure subscriptions.
• Deploy and maintain Private Link / Private Endpoint configurations to secure connectivity to PaaS services.
• Configure and maintain routing (BGP, route tables, user-defined routes) across hub-and-spoke and Virtual WAN topologies.
• Monitor network health, performance, and security posture using Azure Network Watcher, Azure Monitor, and Log Analytics; troubleshoot connectivity, latency, and routing issues.
• Develop and maintain Infrastructure-as-Code (ARM templates, Bicep, or Terraform) for repeatable, auditable network configuration changes.
• Participate in change management processes: documenting configurations, network diagrams, and standard operating procedures.
• Respond to and resolve network incidents and service requests within defined SLAs.
• Collaborate with security and infrastructure teams to support network design for new workloads, migrations, and capacity changes.

What You Bring (Requirements):

• Active Top Secret (TS) clearance with SCI eligibility. Must be a U.S. citizen.
• Bachelor's degree in a related technical field, or equivalent professional experience.   
• 5+ years overall network engineering experience.   
• 3+ years of hands-on experience configuring, administering, and troubleshooting Microsoft Azure networking environments.   
• Demonstrated experience configuring Azure VNets, subnets, NSGs, ExpressRoute, VPN Gateway, and Azure Firewall.   
• Solid understanding of core networking fundamentals: TCP/IP, routing, switching, DNS, DHCP, BGP, and VPN protocols (IPsec/IKEv2).   
• Experience configuring and troubleshooting hybrid connectivity between on-premises and Azure environments.   
• Experience with Infrastructure-as-Code tools (ARM templates, Bicep, or Terraform) for network configuration and change control.   
• Working knowledge of network security best practices, including segmentation, least-privilege access, and firewall policy management.   
• Security+ Certification.

Nice to Have (Differentiators):

• Microsoft Certified: Azure Network Engineer Associate or Azure Administrator Associate.
• Experience with Azure Virtual WAN, Azure Front Door, or multi-region network architectures.
• Experience integrating third-party network/security appliances (e.g., Palo Alto, Cisco, Fortinet) with Azure.
• Scripting experience (PowerShell, Python, or Azure CLI) for network automation and configuration validation.
• Experience supporting federal government, regulated, or compliance-driven environments (FedRAMP, NIST 800-53, etc.), if applicable to this role.