Cloud Engineer (Azure)

Job Description: Security Network Engineer – Cloud Migration (Grade 5)

Job Summary:

The Security / Network Engineer is responsible for supporting migration teams by implementing secure network connectivity, firewall configurations, and security controls required for migration between on-premise and Azure environments. This role ensures compliance with enterprise security standards while enabling seamless and secure workload migration.

In addition, the role operates within a managed services environment, ensuring infrastructure and network services remain secure, available, and performant through proactive monitoring, troubleshooting, and incident resolution.

Key Responsibilities:

Network & Security Implementation

• Implement firewall rule changes to support migration activities and ongoing operations.
• Configure and manage network security devices (e.g., Fortigate, Palo Alto).
• Support hybrid connectivity setup including VPN and ExpressRoute configurations.
• Implement network segmentation and micro-segmentation strategies.
• Enforce enterprise security policies and compliance requirements across environments.
• Support secure connectivity between on-premise and Azure environments.

Azure Networking & Cloud Security

• Configure and manage Azure networking components (VNets, NSGs, route tables, load balancers).
• Implement and maintain secure access controls and network security principles in cloud environments.
• Support design and implementation of secure hybrid architectures.
• Assist in implementing security controls for cloud-based workloads.

Technical Support & Incident Management

• Resolve incidents and service requests within agreed SLA timelines under general supervision.
• Monitor network and security systems proactively to detect and mitigate issues.
• Investigate, analyse, and troubleshoot network and security-related incidents.
• Maintain accurate and timely updates in ticketing systems with resolution details.
• Escalate complex issues to senior engineers or Technical Leads where required.

Service Delivery & Process Compliance

• Ensure adherence to ITIL processes including Incident, Problem, and Change Management.
• Support, track, and document change implementation activities.
• Participate in security audits, compliance checks, and risk assessments.
• Contribute to continuous improvement of security and network operations.

Collaboration & Knowledge Sharing

• Work closely with migration teams, cloud engineers, and security architects.
• Communicate effectively with stakeholders to support secure migration delivery.
• Share knowledge and document solutions for recurring issues.
• Support junior engineers and contribute to team capability development.

Required Skills & Qualifications

• 3–5 years of experience in networking and security engineering.
• Hands-on experience with:
• Firewall administration (Fortigate, Palo Alto preferred)
• Azure networking (VNets, NSGs, routing)
• VPN and ExpressRoute connectivity
• Network security principles and segmentation
• Security policy implementation and compliance
• Strong understanding of hybrid cloud networking architectures.
• Experience supporting enterprise infrastructure and migration projects.

Key Competencies

• Strong troubleshooting and analytical skills in network and security domains.
• Ability to work in high-pressure, mission-critical environments.
• Good communication and stakeholder engagement skills.
• Attention to detail and strong documentation practices.
• Customer-focused mindset with commitment to service excellence.

Qualifications & Certifications

• Bachelor's degree in IT, Computer Science, or related field (or equivalent experience).
• Preferred certifications:
• CCNA / CCNP (Networking)
• Palo Alto, Fortinet, or other firewall certifications
• Microsoft Certified: Azure Network Engineer Associate
• Security certifications (e.g., CISSP, Security+) are advantageous
• Experience with Zero Trust architectures.
• Exposure to cloud security tools (Defender for Cloud, Sentinel).