{"id":730354,"url":"https://alion.io/job/sigmadefense-1755-azure-network-engineer","title":"1755 - Azure Network Engineer","company":{"id":685779,"name":"Sigma Defense Systems","domain":"sigmadefense.com","url":"https://alion.io/company/sigmadefense","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":{"grade":"A","score":100,"open_postings":17,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":13,"computed_at":"2026-10-30T05:48:23Z"}},"role":"Networking","role_family":"Networking","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Rome, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":110000,"max":153000,"currency":"USD","period":"year","gross":null,"usd_annual":153000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"Bicep","optional":false},{"name":"DNS","optional":false},{"name":"PowerShell","optional":false},{"name":"TCP/IP","optional":false},{"name":"Terraform","optional":false},{"name":"VPN","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-27T15:25:09Z","employer_posted_date":"2026-10-27","last_verified_at":"2026-10-30T08:17:47Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":0,"flags":[],"days_open":1},"description":"Sigma Defense is seeking an Azure Network Engineer with deep Microsoft Azure expertise, rather than a general cloud administrator who has occasionally configured networking.\nThis individual should be comfortable taking ownership of complex connectivity problems involving multiple networks, security boundaries, routing paths, firewalls, and cloud environments. The ideal candidate understands how traffic should move through an Azure architecture and can design secure solutions that provide required connectivity without unnecessarily expanding the network attack surface.\nEqual Opportunity Employer/Veterans/Disabled: Sigma Defense Systems is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.\nRequirements\n5+ Years of relevant experience.\nProfessional experience designing, implementing, and supporting Microsoft Azure networking environments.\nStrong understanding of TCP/IP, routing, subnetting, DNS, NAT, VPNs, firewalls, and network segmentation.\nHands-on experience configuring and troubleshooting Azure Firewall and Palo Alto Firewall.\nExperience designing and managing Azure VNets, subnets, NSGs, route tables, and User Defined Routes.\nExperience implementing connectivity between multiple Azure VNets and environments.\nExperience troubleshooting complex network-routing and firewall issues.\nUnderstanding of hub-and-spoke network architectures and centralized network-security models.\nExperience with Azure Private Link and Private Endpoints.\nUnderstanding of hybrid cloud connectivity and integration between Azure and external networks.\nAbility to analyze network traffic, logs, and flow information to diagnose connectivity and security issues.\nExperience designing or supporting Azure Government environments.\nExperience supporting cloud infrastructure within a Department of Defense (DoD) or other highly regulated environment.\nAdvanced experience with Azure Firewall Premium and Azure Firewall Policy.\nExperience with Azure Virtual WAN (vWAN), ExpressRoute, and Azure VPN Gateway.\nExperience with third-party Network Virtual Appliances and next-generation firewall technologies within Azure.\nExperience with Palo Alto Networks, Fortinet, Cisco, or similar enterprise firewall platforms.\nExperience implementing Zero Trust network architectures and micro-segmentation.\nExperience with Azure Network Watcher, Azure Monitor, Log Analytics, Azure DNS, and Private DNS Zones.\nExperience automating Azure networking through Terraform, Bicep, PowerShell, Azure CLI, or other IaC technologies.\nFamiliarity with DoD cybersecurity requirements, RMF, NIST SP 800-53, and STIGs.\nMust be a U.S. citizen.\nMandatory Certifications:\nCompTIA Security+\nMicrosoft AZ104\nComputer Programs/Software:\nPalo Alto Firewall\nAzure Firewall\nMicrosoft Azure Cloud Infrastructure\nPersonnel Clearance Level:\nCandidate must possess or have the ability to obtain an active TS/SCI security clearance.\nClearance may be sponsored for the right candidate.\nEducation Requirements:\nBachelor's degree from an accredited college or university in a Network Engineering or related field of study. \nEssential Job Duties (not all-inclusive):\nDesign, implement, configure, and maintain network infrastructure within Microsoft Azure.\nServe as a technical subject-matter resource for Azure networking, routing, connectivity, and firewall technologies.\nDesign and manage Azure Virtual Networks (VNets), subnets, route tables, User Defined Routes (UDRs), Network Security Groups (NSGs), and Application Security Groups (ASGs).\nConfigure, maintain, and troubleshoot Azure Firewall, Palo Alto Firewall, and associated firewall policies and rule collections.\nDevelop and maintain firewall rules governing traffic between applications, networks, environments, and security boundaries.\nDesign secure network segmentation strategies to control east-west and north-south traffic.\nEngineer secure connectivity between multiple Azure environments, subscriptions, VNets, and external networks.\nConfigure and support VNet peering, hub-and-spoke architectures, VPN connectivity, private endpoints, Private Link, and other Azure connectivity technologies.\nSupport hybrid connectivity using ExpressRoute and site-to-site VPNs.\nDesign routing solutions involving firewalls, network virtual appliances, shared services, and multiple security boundaries.\nTroubleshoot network connectivity, routing, DNS, firewall, latency, and application communication issues.\nAnalyze network flows and firewall logs to identify connectivity problems and potential security issues.\nImplement network controls supporting Zero Trust architectures and micro-segmentation.\nSupport automation of Azure network infrastructure using Infrastructure as Code technologies.\nCollaborate with cloud architects, infrastructure developers, cybersecurity engineers, application teams, and system administrators.\nSalary Range: $110,000 - $153,000 annually.\nBenefits\n Dental and Vision Insurance\n Medical Insurance to Include HSA, FSA, and DFSA Plans\n Life and AD&D coverage\n Employee Assistance Program (EAP)\n 401(k) Plan with Company Matching Contributions\n 160 Hours of Paid Time Off (PTO) \n 12 (Floating) Holidays\n Educational Assistance\n Highly Competitive Salary","description_format":"text","description_chars":5425,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":["Health insurance","Vision insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["C4ISR","Military Communication","Electronic Warfare"],"lifecycle":[{"event":"open","at":"2026-09-11T09:41:32Z"}],"visa":[],"liveness":{"score":89,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.891,"p_room":1,"age_days":2,"expected_fill_days":13,"reasons":["conf:1","velocity","win:early"],"computed_at":"2026-10-30T05:48:23Z"},"pay":{"stated_usd_annual":153000,"is_top_pay":true},"html_url":"https://alion.io/job/sigmadefense-1755-azure-network-engineer","json_url":"https://alion.io/job/sigmadefense-1755-azure-network-engineer.json","meta":{"generated_at":"2026-10-30T08:44:32Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12485,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":685779},"rest":"https://alion.io/mcp/rest/get_company?id=685779"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsigmadefense-1755-azure-network-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsigmadefense-1755-azure-network-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsigmadefense-1755-azure-network-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sigmadefense-1755-azure-network-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsigmadefense-1755-azure-network-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":730354}},{"tool":"search_jobs","arguments":{"company":"sigmadefense.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":730354},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}