Senior Azure Network Engineer

Job Description

About your tasks

• Shape the future of our enterprise hybrid cloud network by designing highly available Azure networking solutions that support business-critical services across Azure, GCP and on-premises environments. ExpressRoute, Virtual WAN, BGP, Azure Firewall and Private Link are all part of your core expertise.
• Observability: Design next-level monitoring solutions using KQL, Azure Workbooks, Alerts and Azure Connection Monitor to proactively detect anomalies, monitor ExpressRoute connectivity and identify business-critical issues before they become incidents.
• Modernize our network security architecture by analyzing and challenging existing designs, implementing Azure Firewall Premium capabilities, refining our Network Security Group strategy, enhancing micro segmentation, evolving our environment towards enterprise standards, improving scalability and reducing operational costs.
• Drive the future of infrastructure automation by establishing Infrastructure as Prompt as a strategic capability within our platform. We want to explore how AI-driven infrastructure management can complement traditional Infrastructure as Code approaches, helping us shape the next generation of cloud operations while continuously improving automation, quality and delivery speed.
• Your critical mission: Design and establish governance guardrails for our Azure networking platform that can evolve into Azure Policies, Blueprints and enterprise governance standards. Develop innovative concepts that enable decentralized network management without compromising security.
• Strengthen our cyber resilience by developing disaster recovery strategies, challenging existing backup concepts, designing automated failover testing and recovery simulations, and ensuring our Azure network platform can be restored quickly and reliably after major incidents.
• Build an intelligent security platform by integrating Microsoft Sentinel, Microsoft Defender and advanced network telemetry to automatically detect, investigate and respond to cyber threats before they impact the business. You’ll continuously enhance our security posture by leveraging automation and proactive response capabilities.
• Collaborate across infrastructure, cloud and security teams, sharing networking expertise, supporting cross-team troubleshooting, optimizing connectivity and routing between Azure, GCP and on-premises environments, and working closely with teams operating Sophos-based network infrastructure. You’ll translate complex technical concepts into clear architectural recommendations and decision papers that support strategic decision-making.
• Explore future network security technologies, including Zero Trust Network Access (ZTNA) with Microsoft Entra Private Access and Global Secure Access, helping us continuously evolve our enterprise connectivity strategy.

Qualifications

About you

• You have deep expertise in Azure networking, including Azure Firewall, ExpressRoute, Virtual WAN, BGP, Private Link and enterprise Hub & Spoke architectures.
• You have experience with Microsoft Sentinel, Microsoft Defender, KQL, Azure Monitor and cloud observability, enabling you to build intelligent monitoring, automate threat detection and proactively respond to security incidents.
• You enjoy challenging existing architectures and are passionate about emerging new technologies such as Infrastructure as Prompt, AI-assisted infrastructure management and intelligent network automation. You thrive on evaluating innovative approaches that push enterprise networking beyond today’s standards.
• Experience with Google Cloud networking, Sophos Firewall or enterprise on-premises networking is desired.
• You have a passion for learning new technologies, sharing knowledge, simplifying complex networking topics for different audiences, and helping other engineering teams build secure and scalable solutions.

Additional Information

About your benefits:

In order to provide you with the best possible support for your individual needs - whether it‘s living a healthy life, having enough time for your family, or developing your skills - we offer a wide range of different, site-specific benefits.

• Welcome days: We want you to feel at home with us from the very first day. Therefore, we welcome you with our comprehensive onboarding program.
• Remote working:While this is a remote position based in Germany, it may require occasional on-site collaboration at our offices in Berlin or Cologne, depending on business and team requirements. For our remote working employees we grant you 500,00 € to set up your office space from home. To create an environment for you and how you work best.
• Anchor days: As per your remote contract there will be some occasions to travel to office for anchor days, this is fully reimbursed including any travelling costs or hotel expenses.
• Personal development: Grow! We support and encourage your individual development through various in- and external trainings.
• Employee referral program: Because you know best who fits in with us, successful recommendations are rewarded with a bonus.

Compensation Grade: Grade 15