Overview

Microsoft has an exciting opportunity for an experienced network engineer to join our Sovereign Cloud Program, working to build out and support networking infrastructure in Microsoft's National Partner Clouds (NPCs).

NPCs are specialized cloud environments that are designed to comply with the data laws of specific countries and regions. You would be part of the team responsible for

enabling secure cross-domain data transfer between the Azure public cloud and the NPCs
enabling secure operational access to the NPCs for the local operations team
NPC operations infrastructure - including WAN and LAN connectivity

These capabilities enable secure data transfer between platforms, and have critical and demanding security, sovereignty, monitoring and control requirements. Coupled with the challenges of supporting complex environments across disparate security domains, these roles create exciting complex engineering and service support challenges you can solve with us!

Microsoft's mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals.

Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

Responsibilities

You'll be a critical member of the team responsible for designing, implementing and supporting networking capabilities within high-assurance, secure and highly-available environments. Your role as a senior network engineer will mean you are responsible for the outcomes the team delivers as well as ensuring other team members grow and learn to deliver better outcomes themselves.
You'll be responsible for championing, implementing and refining DevOps practices in order to improve operational efficiency while ensuring other requirements, such as security, are not compromised.
You'll lead design, network/code and security reviews across teams to identify risks and prevent classes of bugs prior to release by applying expertise in network implementation, available technologies, analysis of telemetry pipelines, and root cause analysis, as well as best practices in identifying and implementing solutions.
You'll understand the capabilities and limitations of existing tools and resources, and the customer impact of design trade-offs and exceptions, to drive and optimize team decision making.
You'll actively drive 24/7/365 support, which means participating in rotating on-call duties. Your responsiveness and problem-solving skills will be crucial.
Collaboration across the global organization is essential. You'll be a contact point between teams, driving cross-team information sharing and process reuse in order to enhance efficiency and consistency.
Working closely with security teams, you'll ensure adherence to security standards. This involves integrating security practices into all aspects of your work. By maintaining a strong security posture, you'll protect critical assets.
You should expect to need to travel to the in-country Sovereign Operations Centres on a regular basis. This physical presence is vital for effective coordination, monitoring, and collaboration within the centre. Exact frequency to be agreed, but needs to be frequent enough to build strong relationships with the partner teams there.

Qualifications

Required:

Bachelor's Degree or equivalent and at least 5 years of hands-on experience in designing and providing operational support to complex networking environments.
Strong knowledge and experience deploying/configuring and maintaining Network environments (both in physical platforms and Azure) including: L2/L3 Routing (BGP) & Switching, Firewalls (NAT & ACLs), IPSEC VPN.
Azure Fundamentals (AZ-900) or any other equivalent Cloud Certification
Proficiency in English (spoken and written) is essential for internal collaboration and reporting.

Preferred:

Deep experience in system and service administration of complex platforms.
A passion for innovation in complex and constrained environments, to deliver advanced and progressive customer experiences.
Understanding of the challenges of system and service management in high security domains.
Systems shell scripting experience (Bash, PowerShell, Python) and Dev Ops suites such as Ansible or equivalent.
Experience working in broad domains including security, software, networking and service design.
Extensive experience of service support, with on-call responsibilities.
Expertise experience in problem solving and analyzing distributed systems and critical production service environments.
DevOps experience, including continuous configuration automation.
Azure deployment knowledge including Bicep and Arm templates.

Security Clearance Requirements:
This role requires access to sensitive company and customer information. Security clearance ensures regulatory compliance, mitigates security risks, and validates the candidate's trustworthiness for high-security environments.

Candidates must be able to meet Microsoft, customer, and/or government security screening requirements for this role. These requirements include, but are not limited to, the following specialized security screenings:

Microsoft Cloud Background Check: Required upon hire/transfer and every two years thereafter.
Singapore Category 2 Clearance (as applicable): Candidates must be willing to undergo a Cat 2 background check, which may include:
- Verification of identity and citizenship status
- Review of education and employment history
- Criminal record screening
- Financial or bankruptcy checks, where applicable
- Assessment of potential security risks (excluding full-scope family investigations required for Category 1)
Customer or government screening requirements: As needed over time.

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.

Senior Cloud Network Engineer