Senior Infrastructure Engineer

• Lead the design of complex Azure network solutions, including Hub and Spoke, Landing Zones, Virtual Networks, Subnets, Network Security Groups, User-Defined Routes, and Peering.
• Develop and implement network connectivity strategies between Azure, AWS, third-party, and on-premises environments, including SD-WAN, ExpressRoute, Site-to-Site VPN, and Remote VPN.
• Implement and manage network connectivity across NewDay offices using Core and Access switches, WiFi Access Points, Controllers, Firewall and 802.1x authentication.
• Configure and deploy Azure networking services and components using Infrastructure as Code tools such as Azure Resource Manager templates, Bicep, or Terraform.
• Design and implement secure network solutions utilising Azure Firewall, Azure DDoS Protection, and other security services.
• Ensure network designs adhere to industry best practices, security standards, and compliance requirements.
• Configure and troubleshoot routing protocols (e.g., BGP) within Azure and hybrid environments.
• Monitor Azure and NewDay offices network performance, health, and security using Azure Monitor, Network Watcher, SolarWinds and other relevant tools.
• Develop and maintain comprehensive documentation, network diagrams, and operational procedures for Azure, SD-WAN and campus office network infrastructure.
• Implement and enforce network security policies and best practices within NewDay-managed network infrastructure.
• Conduct regular security assessments and audits of the NewDay-managed network environment.
• Collaborate closely with architects, Infrastructure and security engineers, application teams, and other stakeholders to understand requirements and deliver integrated solutions.
• Manage a demanding workload with competing priorities within the Network team in a fast-paced, ever-changing environment.
• Participate in on-call rotation for on-call support as required.

Essential

• Deep expertise in Azure networking services, including Azure Virtual Networks, Subnets, Network Security Groups, Azure Firewall, Azure VPN Gateway, Azure ExpressRoute, Traffic Manager, and Azure Monitor.
• In-depth knowledge of Hybrid networking, such as VPN, Firewall, WiFi, LAN and Cisco networking products.
• Solid understanding of network protocols (TCP/IP, BGP, OSPF, DNS, DHCP, HTTP/S).
• Experience with Infrastructure as Code tools (ARM templates, Bicep).
• Experience with hybrid cloud connectivity and network integration between on-premises and Azure environments.
• Strong troubleshooting and problem-solving skills for complex network issues.
• Excellent communication, interpersonal, and presentation skills.
• Ability to work independently and as part of a collaborative team.

Desirable

• Microsoft and Cisco certifications in networking.
• Experience with other cloud platforms such as AWS.
• Knowledge of network security best practices, including threat detection and prevention.
• Experience with network monitoring and analysis tools beyond native Azure offerings., * Problem Solving: Candidate should have a strong logical and methodical approach to solving problems.
• Independent: Work unsupervised with a high level of self-motivation to the highest standard within ambitious timescales.
• Collaborative: The candidate must be able to work cross functionally to achieve the best outcome for partners and customers to identify and propose ways forward.