Network Engineer (Azure + Palo Alto)

About the Role

We are looking for a skilled Network Engineer with hands-on experience in Microsoft Azure networking and Palo Alto security platforms. The ideal candidate will design, implement, and maintain robust, secure, and scalable network infrastructure across on-premises and cloud environments.

Key Responsibilities

• Design, deploy, and manage Azure networking components including Virtual Networks (VNet), VNet Peering, ExpressRoute, Azure VPN Gateway, Azure Firewall, NSGs, and Azure Load Balancer
• Configure, manage, and troubleshoot Palo Alto Networks firewalls (physical and VM-Series) including security policies, NAT rules, App-ID, User-ID, and Threat Prevention profiles
• Manage Palo Alto Panorama for centralized firewall policy management across multiple devices
• Implement and maintain site-to-site and remote-access VPN solutions using Global Protect
• Monitor network performance, conduct root cause analysis, and resolve network incidents within SLA timelines
• Collaborate with cloud architects and security teams to enforce zero-trust network access (ZTNA) principles
• Maintain network documentation including topology diagrams, IP address management (IPAM), and runbooks
• Participate in change management processes and ensure compliance with organizational security policies

Required Skills & Qualifications

• 4–5 years of experience in network engineering with a strong focus on cloud and securit
• Solid hands-on experience with Microsoft Azure networking — VNets, Hub-Spoke topology, Azure Firewall, Application Gateway, and Private Endpoint
• Proficient in Palo Alto NGFW administration — PAN-OS, security/NAT policies, SSL decryption, WildFire, and Panorama
• Good understanding of routing protocols — BGP, OSPF, and static routing in hybrid environment
• Experience with SD-WAN concepts and hybrid connectivity (ExpressRoute / IPSec VPN)
• Familiarity with network monitoring tools (e.g., Azure Network Watcher, SIEM integration
• Understanding of DNS, DHCP, and IP addressing in multi-cloud/hybrid environment

Preferred Qualifications

• Microsoft Certified: Azure Network Engineer Associate (AZ-7000)
• Palo Alto Networks Certified Network Security Engineer (PCNSE)
• Exposure to automation and scripting using Python, Terraform, or Ansible for network provisioning
• Experience working in ITIL-based environments with ticketing tools like ServiceNow.