RahrBSG is looking for a Network Engineer in Shakopee, Minnesota. The Network Engineer designs, deploys, maintains, and supports secure, reliable network infrastructure, with a primary focus on production Microsoft Azure networking environments. The role independently handles moderately complex network configurations, implementations, and troubleshooting within established architecture, security standards, and change-management practices, seeking guidance on complex or unfamiliar issues. Working with infrastructure, cloud, cybersecurity, and application teams, the Network Engineer supports reliable network services that enable the organization's technology and business objectives.
ROLES AND RESPONSIBILITIES: Network Design and Engineering- Design and implement Azure virtual networks, subnets, IP address plans, peering, route tables, and hub-and-spoke or Virtual WAN topologies.
- Configure and support Azure load balancing and traffic management services, including application gateways, web application firewalls, and global traffic distribution.
- Design and implement name resolution for hybrid environments, including Azure DNS, private DNS zones, and conditional forwarding with on-premises DNS.
- Support the technical design and implementation of moderately complex network solutions, including evaluating requirements, identifying appropriate solutions, developing configurations, coordinating implementation, and validating results.
- Build and support hybrid connectivity between on-premises sites and Azure, including site-to-site VPN, point-to-site VPN, and dedicated private circuits, with routing and failover design.
- Design and manage Azure networking components, including Virtual Networks (VNets), subnets, Network Security Groups (NSGs), route tables, Azure Firewall, VPN Gateway, ExpressRoute, private endpoints, DNS, and load-balancing technologies.
- Design and support network connectivity between Azure environments, corporate locations, data centers, and third-party services.
- Apply network segmentation, routing, resiliency, and security principles to ensure solutions meet business and technical requirements.
- Participate in network architecture discussions and provide technical recommendations within the assigned area of responsibility.
Network Deployment and Administration - Configure and maintain routers, switches, firewalls, wireless infrastructure, VPN technologies, and related network services.
- Implement network changes, upgrades, expansions, and migrations with appropriate testing, documentation, and change controls.
- Manage IP addressing, routing, DNS, DHCP, network segmentation, and connectivity configurations.
- Maintain network configurations and technical documentation, including network diagrams, configuration standards, and operational procedures.
- Support hybrid networking technologies connecting cloud and on-premises infrastructure.
Monitoring, Troubleshooting, and Support - Monitor and troubleshoot network availability, performance, capacity, and connectivity using Azure Monitor, Network Watcher, Log Analytics, flow logs, and other network management and diagnostic tools.
- Independently diagnose and resolve moderately complex network incidents involving routing, connectivity, latency, DNS, firewall policies, VPNs, and cloud infrastructure.
- Perform root-cause analysis for recurring or significant network issues and implement corrective actions.
- Provide escalation-level technical support for network-related incidents and service disruptions.
- Participate in scheduled maintenance activities and an on-call rotation as required to support production systems.
Security and Reliability - Implement network security controls in partnership with cybersecurity and infrastructure teams.
- Implement and manage Azure network security controls, including network security groups, application security groups, Azure Firewall, DDoS protection, service endpoints, and Private Link/private endpoints, in accordance with established security standards.
- Apply identity and access controls to Azure network resources, including role-based access control and integration with Microsoft Entra ID, in partnership with cybersecurity and infrastructure teams.
- Support network resiliency, redundancy, disaster recovery, and business continuity requirements.
- Identify network vulnerabilities, configuration risks, and opportunities to improve reliability, security, and performance.
- Ensure network changes follow established change-management, documentation, and security practices.
Continuous Improvement and Collaboration - Identify opportunities to improve network performance, reliability, scalability, and operational efficiency.
- Develop or improve automation for repeatable network configuration and deployment activities using tools such as PowerShell, Azure CLI, Bicep, or Terraform.
- Work collaboratively with cloud, infrastructure, cybersecurity, application, ERP, and service desk teams to resolve technical issues and implement solutions.
- Provide technical guidance to team members and contribute knowledge through documentation and knowledge sharing.
- Maintain current knowledge of Azure networking capabilities, network security practices, and relevant technologies.
MINIMUM EDUCATION & WORK REQUIREMENTS:- Bachelor's degree in Information Technology, Computer Science, Network Engineering, or a related field, or an equivalent combination of education and relevant technical experience.
- Minimum of 4 years of professional experience supporting and engineering enterprise network environments.
- Hands-on experience designing, deploying, and supporting Microsoft Azure networking in a production environment.
- Experience supporting hybrid cloud and on-premises network environments.
- Experience implementing moderately complex to complex network solutions.
- Preferred Qualifications
- Microsoft Azure networking or infrastructure certification, such as Microsoft Certified: Azure Administrator, Azure Network Engineer, Azure Solutions Architect, or Azure Security Engineer.
- Relevant networking certification, such as Cisco CCNA or equivalent experience.
KNOWLEDGE, SKILLS, AND ABILITIES:- Strong knowledge of TCP/IP, IPv4/IPv6, subnetting, routing, switching, VLANs, DNS, DHCP, NAT, VPNs, and firewall technologies.
- Working knowledge of routing protocols and concepts, including BGP and dynamic routing.
- Strong understanding of Microsoft Azure networking, including VNets, VNet peering, NSGs, User Defined Routes, Azure Firewall, VPN Gateway, ExpressRoute, Private Link/private endpoints, DNS, and load balancing.
- Ability to translate technical and business requirements into network designs and implementation plans.
- Strong troubleshooting skills with the ability to diagnose complex network connectivity, routing, security, and performance issues.
- Understanding of network security concepts, segmentation, least-privilege access, and cloud networking security practices.
- Experience with network monitoring, logging, and diagnostic tools.
- Working knowledge of infrastructure-as-code and automation technologies such as Terraform, Bicep, PowerShell, or Azure CLI.
- Ability to create and maintain network diagrams, configuration documentation, implementation plans, and operational procedures.
- Strong verbal and written communication skills with the ability to explain technical issues to both technical and nontechnical stakeholders.
- Ability to manage multiple technical priorities and drive assigned network projects through implementation.
