SC Cleared Azure Network Engineer – Remote (6‑month contract)

About the role

We are looking for a Security‑Cleared Azure Network Engineer to design, deploy and secure Azure networking solutions for a client operating in a highly regulated cloud environment. The position is remote, inside IR35, and runs for an initial six‑month period.

Key responsibilities

• Design Azure virtual networks, routing and subnet architectures.
• Configure secure connectivity using VPN, ExpressRoute and Azure Firewall.
• Implement secure application networking with NSGs, ASGs, WAFs, firewall policies and private endpoints.
• Prepare the environment for penetration testing and ITHC activities.
• Deploy network infrastructure as code using Terraform.
• Troubleshoot routing, connectivity, DNS and firewall issues.
• Produce network diagrams, architecture documentation, standards and runbooks.

Required profile

• Proven experience designing and operating Azure networking solutions.
• Hands‑on knowledge of VPN Gateway, ExpressRoute and Azure Firewall.
• Familiarity with security controls such as NSGs, ASGs, WAF and private endpoints.
• Experience delivering infrastructure with Terraform and other IaC tools.
• Ability to support security testing preparations and resolve complex connectivity problems.

Required skills

• Azure Virtual Network (VNet) and subnet design
• Azure routing and network architecture
• VPN Gateway / ExpressRoute
• Azure Firewall
• Network Security Groups (NSG) and Application Security Groups (ASG)
• Web Application Firewall (WAF) and firewall policies
• Private Endpoints
• Terraform (Infrastructure as Code)
• Hybrid networking and secure cloud networking patterns