Our client, a leading London-based organisation, is seeking a skilled Network Engineer with strong experience in Microsoft ecosystem environments. You will be responsible for designing, implementing, and maintaining highly available, secure, and scalable network infrastructure across hybrid and cloud landscapes. You’ll work closely with internal IT, security, and cloud teams to ensure the reliability and performance of business-critical connectivity.

Key Responsibilities:

• Design, deploy, and support enterprise network solutions using Microsoft and industry-standard technologies.
• Administer and monitor Azure networking components (VNets, NSGs, ExpressRoute, VPN Gateway, Azure Firewall, Application Gateway, Azure Front Door, Azure Traffic Manager).
• Integrate, secure, and troubleshoot on-premise and cloud (Azure) network environments.
• Manage Active Directory, DNS, DHCP, and Azure Active Directory for network authentication.
• Define and implement network security protocols, firewall rules, and network segmentation (including Azure NSG and Azure Firewall policies).
• Implement and support hybrid connectivity (site-to-site VPNs, ExpressRoute, Azure Virtual WAN).
• Monitor network performance using Azure Network Watcher, Azure Monitor, and on-premises tools.
• Perform regular network maintenance, upgrades, and documentation.
• Work with SIEM and security tools for network incident response and monitoring (Microsoft Sentinel, Defender for Cloud).
• Collaborate with infrastructure, platform, and cyber security teams on projects and BAU tasks.

Technical Stack & Tools:

• Cloud Networking (Azure):
• Azure Virtual Networks (VNets), Subnets
• Azure VPN Gateway, Azure ExpressRoute, Azure Virtual WAN
• Azure Application Gateway, Azure Load Balancer, Azure Firewall
• Azure Front Door, Azure Traffic Manager
• Network Security Groups (NSG), Application Security Groups
• Azure Bastion

On-premise & Hybrid:

• Windows Server (2016/2019/2022) Network Services
• Active Directory, DNS, DHCP
• Cisco, HP, or Aruba Switches and Routers (as applicable)
• Fortinet, Cisco ASA, Palo Alto (optional, as part of hybrid security stack)
• Wireless networking (Cisco, Aruba, or similar platforms)

Authentication & Security:

• Azure Active Directory, Conditional Access
• MFA, SSO, Azure AD Connect, Privileged Identity Management
• Microsoft Defender for Cloud, Microsoft Sentinel (SIEM), Azure MFA
• SSL/TLS, VPNs, IPsec
• Monitoring & Management:
• Azure Monitor, Azure Network Watcher
• Wireshark, SolarWinds, PRTG, or equivalent NMS tools
• PowerShell, Azure CLI
• Automation/Scripting:
• PowerShell, Bash (for automation and management)
• ARM Templates, Terraform (Azure Provider) – for network resource provisioning
• Collaboration & Documentation:
• Microsoft Teams, SharePoint, Confluence

Preferred Qualifications:

• Experience designing and supporting hybrid enterprise networks (on-prem & cloud integration).
• Competence with Azure networking and security best practices.
• Knowledge of SD-WAN technologies and Zero Trust Networking.
• Proficient troubleshooting at Layers 2-7 of the OSI model.
• Relevant certifications (e.g., Microsoft Certified: Azure Network Engineer Associate, CCNA/CCNP, CompTIA Network+).