Senior Azure Government Cloud Network Engineer

Job Description

Job Title: Senior Azure GovCloud Network Engineer (Zero-Trust, IaC, & Advanced Routing)

Location:100% Remote

Duration: 8-12+ months contract to hire

Client: Fiserv

Pay:$85/hr on W2 without benefits

Manager Notes:

Expert-Level Azure Routing Toolkit: Proven history deploying Azure Virtual WAN (VWAN) with Routing Intent, Secured Virtual Hubs, Forced Tunneling, and complex User-Defined Routes (UDRs).
Advanced BGP & Hybrid Connectivity: Mastery of Border Gateway Protocol (BGP) engineering over multi-circuit Azure ExpressRoute and VPN gateways in high-availability enterprise configurations.
Advanced Infrastructure as Code (IaC): Proven mastery of Terraform to build declarative, production-grade, and immutable multi-environment architectures.
Azure Government Cloud Expertise: Deep experience navigating the specific constraints, endpoint differences, and compliance parameters of Azure GovCloud.
Microservices & Container Networking: Strong understanding of service-to-service communication, ingress controllers, and overlay/underlay networking (e.g., Azure CNI) for autonomous microservices.
Scaled Agile Workflow Integration: Solid experience operating in distributed, multi-location environments utilizing frameworks like SAFe or Scrum-at-Scale, leveraging Azure DevOps (ADO) for linking infrastructure work items to application features.
Traffic & Packet Analytics: Proficiency using Azure Network Watcher, Traffic Analytics, and Azure Monitor to capture database lag, CPU/memory telemetry, and error behaviors under heavy simulated traffic loads.

Job Description:

We are seeking a Senior Azure Government Cloud Network Engineer to design, automate, and maintain a high-performance, software-defined network that powers our zero-trust, shift-left deployment model.
In this role, you will be the architectural anchor for our autonomous microservices platform. You will engineer fully automated, immutable networks across all lifecycle stages to completely eliminate environmental configuration drift and guarantee absolute environment parity.
Operating within a multi-location Scaled Agile framework, you will build automated infrastructure gates, integrate service virtualization, and implement expert-level routing frameworks. You will leverage VWAN with Routing Intent, Secured Hubs, Forced Tunneling, and advanced BGP configurations to support dark launching, dynamic feature flagging via Azure App Configuration, and multi-tiered automated performance testing.

Core Responsibilities

1. Expert-Level Enterprise Routing & Traffic Engineering

Advanced VWAN Orchestration: Design and manage global Azure Virtual WAN (VWAN) architectures utilizing Secured Virtual Hubs integrated with security partners or Azure Firewall to centrally govern all cloud-native traffic.
Deterministic Routing Intent: Implement Routing Intent and Routing Policies within VWAN to systematically direct all private and internet-bound traffic (Internet and Private Traffic categories) through security appliances without complex manual programming.
Dynamic Hybrid BGP Optimization: Engineer resilient, multi-site Azure ExpressRoute data paths using advanced Border Gateway Protocol (BGP) communities, multi-exit discriminators (MED), and AS-path prepending to enforce predictable failover paths for distributed federal sites.
Forced Tunneling & Symmetric Routing: Author rigorous User-Defined Routes (UDRs) and BGP policies to mandate Forced Tunneling, ensuring all branch, cloud, and edge-bound traffic is backhauled to specific inspection boundaries without causing asymmetric routing drops.

2. Immutable Infrastructure as Code (IaC) & Automation

100% Code-Driven Architecture: Define, provision, and lifecycle all complex routing fabrics—including BGP peering, VWAN configurations, Hub policies, and UDR matrices—strictly via modular, repeatable Terraform templates.
State & Configuration Governance: Implement secure backend state management, drift detection mechanisms, and policy-as-code validations (e.g., Azure Policy, OPA/Rego) to prevent unauthorized, out-of-band manual network alterations.
Automated Pipeline Gates: Embed network IaC directly into Azure DevOps CI/CD pipelines. Network deployments must automatically execute linting, static analysis security scans, and trigger immediate environment-specific compliance gates upon Git check-in.

3. Azure Government Cloud Compliance & Security