> Markdown version of [/jobs/ext/3691893-azure-security-engineer](https://www.wearedevelopers.com/jobs/ext/3691893-azure-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Azure Security Engineer

- **Company:** OpenKyber LLC
- **Location:** Atlanta, GA, United States (Remote available)
- **Contract:** Permanent contract
- **Skills:** Active Directory, Application Firewall, Microsoft Azure, Border Gateway Protocol, DDoS Mitigation, Network Address Translation, Domain Name System (DNS), Network Topologies, Internet Protocol Security (IP SEC), IP Routing, Subnetting, Virtual Private Networks (VPN), Network Security, Network Troubleshooting, Log Analysis, Network Architecture, Routing, Network Segmentation, Packet Analyzer, Peering, Windows PowerShell, Zero Trust Network Access, SQL Databases, Wireshark, Network Access Control, Load Balancing, System Availability, Software Security, Azure Powershell, Firewalls (Computer Science), Infrastructure as Code (IaC), Bicep, Fortinet, Azure Service Fabric, Terraform
- **Published:** October 11, 2026
- **Apply:** https://www.careerjet.com/jobad/usa387832681509e10e36b26e05dfb6a2e

## About the Role

* Core Azure Networking: Hands-on experience configuring VNets, Subnets, Route Tables, VNet Peering, and Private Endpoints.
 * Hybrid Connectivity: Deep knowledge of ExpressRoute, IPSec VPNs, BGP routing protocols, and NAT configurations.
 * Network Security: Practical experience with Azure Firewall, NSGs/ASGs, Third-Party NVAs, and WAF configuration.
 * DNS & Traffic Management: Strong understanding of DNS routing (Azure Private Resolver/Zones), Load Balancing (L4 vs. L7), and HTTP/HTTPS traffic flows.
 * Automation: Proficiency in deploying network resources via Terraform or Bicep, along with Azure CLI or PowerShell scripting.
 * Troubleshooting: Expertise with packet inspection tools (Wireshark), Azure Network Watcher, and IP routing diagnostic commands.

## Description

* Provision, configure, and manage core Azure networking components, including VNets, Subnets, VNet Peering, User Defined Routes (UDRs), and Azure Route Server.
 * Implement and manage hub-and-spoke network topologies and Azure Virtual WAN (vWAN).
 * Deploy and maintain Private Endpoints, Private Link, and Service Endpoints to secure access to Azure PaaS resources (Storage, SQL, App Services).

 2. Hybrid Connectivity & Traffic Routing:
 * Implement and maintain hybrid cross-premises connectivity via Azure ExpressRoute, Site-to-Site (S2S) VPNs, and Point-to-Site (P2S) VPNs.
 * Configure BGP routing, route tables, and express-route circuits to ensure high availability and low-latency interconnects.
 * Deploy and optimize application delivery and load-balancing services using Azure Application Gateway (WAF), Azure Front Door, Azure Load Balancer (Public/Internal), and Traffic Manager.

 3. Network Security & Infrastructure Protection:
 * Configure and maintain Network Security Groups (NSGs), Application Security Groups (ASGs), and Azure Firewall / Network Virtual Appliances (NVAs) (e.g., Palo Alto, Fortinet).
 * Monitor and manage Azure DDoS Protection, Web Application Firewall (WAF) rules, and network micro-segmentation.
 * Enforce network access control policies aligning with Zero-Trust principles.

 4. Operations, Monitoring, & Infrastructure as Code (IaC):
 * Deploy network infrastructure using IaC frameworks such as Terraform, Bicep, or ARM templates.
 * Perform end-to-end network troubleshooting using Azure Network Watcher, Connection Monitor, NSG Flow Logs, Packet Capture, and Log Analytics.
 * Manage DNS architecture in hybrid setups, including Azure Private DNS Zones, Private Resolver, and integration with on-premises Active Directory DNS.