> Markdown version of [/jobs/ext/4721949-azure-network-engineer-cleared-polygraph](https://www.wearedevelopers.com/jobs/ext/4721949-azure-network-engineer-cleared-polygraph). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Azure Network Engineer - Cleared (Polygraph)

- **Company:** TrueTandem
- **Location:** Reston, VA, United States
- **Experience:** Expert
- **Salary:** $175,000 - $230,000
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Microsoft Azure, Domain Name System (DNS), Network Topologies, Subnetting, Network Security, Virtual Desktops, Network Configuration and Change Management, Routing, Network Virtualization, Data Streaming, Firewalls (Computer Science), Infrastructure as Code (IaC), Terraform
- **Published:** November 14, 2026
- **Apply:** https://www.juju.com/job/15_c91b88651

## About the Role

* Five or more years of experience, or equivalent experience, building Azure infrastructure, with deep hands-on work in virtual networking, routing, network security groups, Azure Firewall, private endpoints, and private DNS. Networking is the center of this role, not an adjacent skill.

 * Direct experience in Azure Government or another sovereign or disconnected cloud.

 * Demonstrated ability to diagnose a broken path across routing, DNS, and firewall policy, plus explain the fix in terms an assessor and a customer engineer can understand.

 * U.S. citizenship.
 * Active Top Secret with Polygraph clearance.

## Description

* Design and implement network topology, routing, and segmentation for Azure Virtual Desktop (AVD), Microsoft 365, Power Platform, management, and telemetry paths.

 * Build private connectivity end to end, including private endpoints, link scopes, private DNS zones, and conditional forwarding that resolves from every segment, as required. Coordinate external DNS dependencies.

 * Implement and document boundary controls, network security groups, firewall policy, and the controlled transfer path used to move content, packages, and updates.

 * Deliver network configuration as Terraform within the program's provider baseline Infrastructure as Code (IaC), central deployment location, and tenant state separation model.

 * Implement network-layer access controls for platform administration, including management subnet reachability, administrative paths, and the reachability side of break-glass, in line with the program's design.

 * Produce network evidence for the authorization package, including boundary diagrams, data flow descriptions, network configuration baselines, and the control statements that reference them.
 * Troubleshoot connectivity and ingestion failures originating below the application and security tooling.