Overview
TerpSys is hiring a Senior Network Engineer to join our team supporting Azure platforms. This role will include design, secure, and support of full application environments. This role will work closely with our engineering team and developers to turn requirements into secure, repeatable infrastructure. This role will have a focus on leveraging infrastructure as code and deployment automation, as well as security in design.
Responsibilities
Networking and security
---Provide day-to-day and 24 x 7 operational support of IT-related functions including server, application, and network infrastructure.
---Manage, install, configure, administer, support, and troubleshoot applications, server and network infrastructure, and remote systems.
---Provide support in performance monitoring, back-ups, reporting, problem identification, management, and resolution.
---Design and maintain hub-and-spoke vNet architectures, including peering, subnets, NSGs, route tables, and private DNS zones.
---Implement Private Endpoints so PaaS traffic stays off the public internet.
---Run Application Gateway with WAF, including TLS certificates, listeners, and backend routing to Container Apps.
---Own secrets and certificates in Azure Key Vault using managed identities and RBAC.
Compute and applications
---Deploy and operate Azure Container Apps environments, including vNet integration, scaling rules, revisions, and ingress.
---Manage Azure Container Registry and its integration with deployment pipelines.
Data and storage
---Provision and secure Storage Accounts, including lifecycle policies, network rules, and RBAC access.
---Administer Azure SQL, including private networking, Entra authentication, backups, and performance tuning.
---Build backup and disaster recovery plans across data services.
Identity and governance
---Manage Entra ID app registrations, enterprise apps, service principals, and managed identities.
---Enforce least-privilege RBAC, Conditional Access, and PIM across subscriptions.
---Apply Azure Policy, management groups, and tagging standards.
---Track and reduce spend with Azure Cost Management and budgets.
DevOps and automation
---Build CI/CD pipelines.
---Write modular Infrastructure as Code in Bicep and Terraform.
---Automate operations with Azure CLI and PowerShell.
Monitoring and operations
---Set up Azure Monitor, Log Analytics, and Application Insights with useful alerts and dashboards.
---Troubleshoot issues that span networking, identity, and application layers.
---Document environments and mentor junior engineers.
---Create and maintain network documentation to identify server hardware, software configuration, and connectivity.
---Develop plans for hardware, systems operations, and technical procedures; provide input for disaster recovery and security plans.
---Manage systems activity such as planning, installation, operation, and maintenance.
Minimum Qualifications
---Bachelor's Degree.*
---Two or four-year college degree, equivalent relevant experience, or equivalent relevant certification.
---5+ years of hands-on Azure engineering, including production environments that serve development teams.
---Three to five years of hands-on work experience in administering small, medium, or large networks.
---Hands-on work with containerized apps on Azure Container Apps, AKS, or App Service.
---Strong Entra ID skills, including app registrations, managed identities, and RBAC design.
---Infrastructure as Code with Bicep or Terraform.
---CI/CD experience with GitHub Actions or Azure DevOps.
---Solid networking fundamentals: DNS, TCP/IP, and TLS.
---Strong analytical and / or creative abilities, troubleshooting skills, and being a solutions provider to the customer.
---Strong organization, documentation, written and verbal communication, and customer service skills.
---Strong ownership and overall responsibility of task(s) and / or project(s).
---Clear communication with developers, stakeholders, and customers.
---Ability to work independently, as well as part of a team. Successfully mastered the qualifications of subordinate roles.
*Candidates without a Bachelor's Degree must possess 8+ years of professional IT experience with a minimum of 4 years as a Systems or Network Engineer.
Desired Experience/ Qualifications/Certifications
---Azure certifications such as AZ-104, AZ-305, AZ-400, or AZ-500.
---Kubernetes experience on AKS or Amazon EKS.
---Exposure to AWS or other multi-cloud environments.
---GitHub Enterprise administration and GitHub Advanced Security.
---Microsoft Intune, Defender for Endpoint, or Microsoft 365 administration.
---Consulting or managed-services background supporting multiple customers.
