Description :

Position : Azure Cloud Network Architect

Experience : 7+ Yrs

Mode : Full time Permanent

Location : Remote/Work from Home/WFH

Job Description :

We are hiring an experienced Network Engineer with strong expertise in Azure cloud networking to design, build, operate, and transition a secure, scalable, and multi-tenant data platform.

This position plays a critical role in enabling secure data ingestion, processing, governance, and controlled data sharing across government entities within a sovereign Azure environment, aligned with best practices and regulatory requirements.

Responsibilities :

- Design end-to-end Azure network architectures supporting multi-tenant data platforms with strict isolation between tenants.

- Define Azure Landing Zone network topology, including management groups, subscriptions, VNETs, subnets, routing, and naming standards.

- Architect secure connectivity patterns for data services such as Azure Data Factory, Databricks, Purview, storage accounts, and analytics tools.

- Design hub-and-spoke and shared services networking models aligned with enterprise and government cloud standards.

- Define private networking strategies using Private Endpoints, Service Endpoints, and Private DNS for data services.

- Ensure network designs support data governance, lineage, and controlled data exchange integrations.

- Implement network infrastructure using Infrastructure as Code (IaC)

- Configure VNETs, subnets, NSGs, UDRs, Azure Firewall, Application Gateway, Load Balancers, and network security controls.

- Enable secure hybrid connectivity (ExpressRoute / VPN) where required.

- Configure private access for Azure Data Factory, Databricks workspaces, storage accounts, and Purview.

- Implement network logging, diagnostics, and monitoring using Azure Monitor, Network Watcher, and Log Analytics.

- Support performance testing, connectivity validation, and security testing.

- Manage day-to-day network operations ensuring high availability, performance, and SLA adherence.

- Monitor network health, latency, throughput, and security events across environments.

- Troubleshoot and resolve connectivity issues impacting data ingestion, processing, and analytics workloads.

- Support onboarding of new tenants/entities, ensuring secure network provisioning and access enablement.

- Maintain network runbooks, SOPs, and escalation procedures.

- Enforce network security controls aligned with zero-trust principles.

- Implement network segmentation to protect sensitive data and regulated workloads.

- Support data sovereignty and compliance requirements through controlled access and traffic flow.

- Participate in security reviews, audits, and compliance validations.

- Produce detailed network architecture diagrams and configuration documentation.

Key Skills & Requirements :

7+ years of experience in network engineering with strong Azure cloud exposure.

Deep hands-on expertise in Azure networking :

- VNETs, Subnets, NSGs, UDRs

- Azure Firewall, Application Gateway, Load Balancer

- Private Endpoints, Private DNS Zones

- ExpressRoute and Site-to-Site VPN

- Strong experience designing Azure Landing Zones and multi-subscription environments.

- Proven experience supporting data platforms involving : Azure Data Factory (ADF), Azure Databricks, Azure Storage / Data Lake, Microsoft Purview

- Experience with Infrastructure as Code (Terraform, ARM/Bicep).

- Strong understanding of network security, segmentation, and isolation in multi-tenant environments.

- Experience with monitoring, logging, and troubleshooting large-scale cloud networks.

- Ability to work in regulated and sovereign cloud environments