SR. NETWORK ENGINEER L2(CONTRACT)

Azure Cloud Network Design & Implementation roles

7+ years

Location - Bangalore

Project: Azure Network & Connectivity Migration
Role Level: L4 / Senior Network Engineer
Primary Skills: Azure Networking, ExpressRoute, BGP, Hub-and-Spoke, Cisco Meraki MX/vMX, SD-WAN, VPN, Azure Firewall, Application Gateway/WAF, Load Balancing, DNS, Private Link, Network Security & Troubleshooting

Role Summary

Seeking an experienced L4 / Senior Network Engineer with strong end-to-end expertise in Microsoft Azure networking and enterprise network technologies.

The engineer will be responsible for designing, implementing, migrating, securing, and supporting the Azure network infrastructure, including Hub-and-Spoke architecture, ExpressRoute, VPN connectivity, routing, Cisco Meraki vMX, Azure Firewall, Application Gateway/WAF, load balancing, private connectivity, DNS, and network monitoring.

The role requires strong hands-on capability in implementing and troubleshooting complex Azure-to-on-premises, Azure-to-Azure, branch-to-Azure, and third-party network connectivity.

Key Responsibilities

• Design, implement, and support end-to-end Microsoft Azure network architecture.
• Design and implement Azure Hub-and-Spoke networking architecture.
• Configure and manage VNets, subnets, address spaces, VNet peering, NSGs, ASGs, route tables and User Defined Routes (UDRs).
• Design, implement, and troubleshoot Azure ExpressRoute connectivity between on-premises/data-center networks and Azure.
• Configure and manage ExpressRoute circuits, ExpressRoute gateways, connections, and peering. These are core components documented by Microsoft for ExpressRoute connectivity.
• Strong hands-on knowledge of BGP routing, including route advertisement, route propagation, filtering, and troubleshooting. Azure ExpressRoute uses BGP for dynamic route exchange between on-premises networks and Azure.
• Design and support ExpressRoute resiliency and redundant connectivity.
• Design, configure, and troubleshoot Azure VPN Gateway, Site-to-Site VPN and Point-to-Site VPN where required.
• Design and manage Azure Firewall, Firewall Policy, DNAT/SNAT, network rules, application rules, and network traffic flows.
• Configure and troubleshoot Azure Application Gateway, WAF, Azure Load Balancer, and related application connectivity.
• Design and implement Azure Private Link and Private Endpoints for secure access to Azure services.
• Design and troubleshoot Azure DNS, Private DNS Zones, DNS forwarding, and hybrid DNS resolution.
• Design and troubleshoot routing between Hub, Spoke, on-premises, branch, third-party, and external networks.
• Understand and troubleshoot Azure system routes, custom routes/UDRs, BGP routes, route propagation, next-hop selection, and asymmetric routing.
• Configure and support Azure Route Server and Azure Virtual WAN where required.
• Support migration of Cisco Meraki VPN concentrator infrastructure to Azure-hosted Meraki vMX.
• Configure and troubleshoot Cisco Meraki MX/vMX, AutoVPN, SD-WAN and Site-to-Site VPN connectivity.
• Plan and execute network migrations, production cutovers, rollback procedures, and post-migration validations.
• Perform advanced troubleshooting of network latency, packet loss, VPN tunnels, BGP, routing, firewall, NAT, DNS, and application connectivity issues.
• Use Azure Network Watcher, packet capture, connection troubleshooting, NSG flow information, traceroute and other diagnostic tools.
• Implement appropriate network segmentation and security controls for Azure workloads.
• Review Azure network architecture for availability, resiliency, security, scalability, and operational supportability, which aligns with Microsoft's defined Azure Network Engineer responsibilities.
• Coordinate with Microsoft, Cisco Meraki, telecom/service providers, security teams, application teams, server teams, DBAs, and third-party vendors.
• Prepare and maintain HLD, LLD, network diagrams, IP addressing plans, routing documentation, migration procedures, SOPs, change plans, and operational handover documentation.
• Provide L4 escalation support, technical leadership, RCA, and permanent corrective actions for critical network incidents.

Mandatory Azure Networking Skills

The candidate should have strong hands-on expertise in:

• Azure Virtual Networks
• Subnets and IP address planning
• Hub-and-Spoke architecture
• VNet Peering
• Azure ExpressRoute
• ExpressRoute Gateway
• ExpressRoute Circuits and Connections
• ExpressRoute Private Peering
• BGP
• Azure VPN Gateway
• Site-to-Site VPN
• Point-to-Site VPN
• Azure Route Tables / UDR
• Azure Firewall / Firewall Policy
• NSG / ASG
• Azure Application Gateway
• Web Application Firewall (WAF)
• Azure Load Balancer
• Azure Private Link
• Private Endpoints
• Azure DNS / Private DNS
• Azure Route Server
• Azure Virtual WAN
• NAT Gateway
• Azure Bastion
• Network Watcher
• Network monitoring and troubleshooting

Microsoft's current Azure Network Engineer Associate scope specifically includes core networking, hybrid connectivity, application delivery, private access, and network security, making these appropriate competency areas for your L4 requirement.

Enterprise Networking Skills

• TCP/IP
• BGP
• OSPF
• Static and dynamic routing
• Route redistribution
• IPSec VPN
• VLANs
• NAT / SNAT / DNAT
• DNS
• DHCP
• Subnetting and IP addressing
• Firewalls
• SD-WAN
• Packet capture and traffic-flow analysis
• High Availability and network resiliency
• Advanced network troubleshooting

Cisco Meraki Skills

• Cisco Meraki MX
• Cisco Meraki vMX in Azure
• Meraki Dashboard
• AutoVPN
• SD-WAN
• Site-to-Site VPN
• VPN Concentrator
• Routing
• Firewall policies
• NAT
• Meraki network troubleshooting

ExpressRoute Expertise Should Be Mandatory

I would explicitly put the following statement in the JD because ExpressRoute is an important requirement for the role:

Candidate must have hands-on experience in end-to-end Azure ExpressRoute implementation and troubleshooting, including ExpressRoute circuit provisioning, gateways, private peering, BGP configuration, route advertisement/propagation, VNet connectivity, redundancy, monitoring, and troubleshooting hybrid connectivity between on-premises/data-center networks and Microsoft Azure.

Microsoft's reference architecture identifies the ExpressRoute circuit, gateway, and connection as the three main components for connecting an on-premises network to an Azure VNet through ExpressRoute private peering.

L4-Level Expectations

• Independently own Azure network design and implementation.
• Lead complex network migration and transformation projects.
• Review existing infrastructure and propose target Azure network architecture.
• Create and review HLD and LLD.
• Lead ExpressRoute and hybrid connectivity implementation with service providers.
• Lead troubleshooting of complex BGP, routing, ExpressRoute, VPN, firewall and connectivity issues.
• Perform network impact and risk assessments before production changes.
• Prepare implementation, migration, validation and rollback plans.
• Lead technical bridge calls for critical incidents.
• Provide technical guidance to L2/L3 Network Engineers.
• Coordinate with Microsoft Azure, Cisco Meraki, ISPs/telcos and security vendors.
• Perform Root Cause Analysis (RCA) and recommend corrective/preventive actions.

Preferred Certifications

• Microsoft Certified: Azure Network Engineer Associate (AZ-700). Microsoft positions this certification around designing, implementing and maintaining Azure networking infrastructure, routing, hybrid connectivity, private access and network security.
• Cisco CCNP Enterprise or equivalent hands-on experience.
• Relevant Cisco Meraki networking experience/certification.

Mandatory Skills: Azure Network .

Experience: 5-8 Years .

Reinvent your world. We are building a modern Wipro. We are an end-to-end digital transformation partner with the boldest ambitions. To realize them, we need people inspired by reinvention. Of yourself, your career, and your skills. We want to see the constant evolution of our business and our industry. It has always been in our DNA - as the world around us changes, so do we. Join a business powered by purpose and a place that empowers you to design your own reinvention.