Microsoft—Senior Cloud Network Engineer

Job description

Description: Overview Microsoft Digital(MSD) builds and manages the critical products and services that Microsoft runs on. We boldly pursue big ideas that power transformational advances at Microsoft and for our customers, while helping Microsoft teams work smarter, faster, and more securely every day. Microsoft Digital employees have deep technical and business expertise, customer insights, and a clear point of view that comes from first-hand, large-scale experience with Microsoft and industry solutions. We are engineers, technology leaders and experts, digital transformation change agents, and customer advocates.  We have exciting opportunities for you to innovate, influence, transform, inspire, and grow within our organization and we encourage you to apply to learn more!  The Microsoft Infrastructure Engineering Services (IES) organization is for those technology professionals who want to be strategic partners to the business and be the first place to create innovative solutions using Microsoft and industry leading products and services. Unlike other enterprise organizations, IES employees create global impact for thousands of partners and employees.  People working within Microsoft Infrastructure Engineering Service(IES) ensure Microsoft is maximizing productivity to its fullest, and therefore, helping lead the company’s digital transformation journey. We build flexible, reliable, enterprise-scalable solutions with Microsoft product teams – influencing products that customers use, enabling them to be more productive.  Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond. #IES #CNE #MSD #MSDJOBS Responsibilities Secure Edge Architecture & Engineering: - Lead the design and implementation of Secure Edge networking solutions aligned with Microsoft's Zero Trust strategy and Secure Future Initiative (SFI) objectives. - Design and build enterprise-scale secure connectivity solutions using Azure Networking, Global Secure Access (GSA), Azure Firewall, Palo Alto Firewalls, Virtual WAN, VPN, Proxy, DNS, and Secure Service Edge (SSE) technologies. - Drive modernization from traditional network and security appliances to cloud-native, software-defined platforms. - Develop next-generation Secure Edge architectures supporting hybrid cloud and multi-cloud connectivity. - Create migration strategies and execution plans for transitioning legacy networking and security services to modern Secure Edge platforms. - Partner with Security, Compliance, Identity, Infrastructure, and Product Engineering teams to deliver secure and scalable solutions. - Influence engineering standards, architecture patterns, operational practices, and service design decisions across Microsoft Digital. - Translate business and customer requirements into scalable engineering solutions. - Evangelize engineering excellence, operational rigor, and security good practices across teams. - AI-Driven Engineering & Automation - Drive adoption of AI-powered engineering practices to improve operational efficiency, incident response, troubleshooting, and network lifecycle management. - Leverage Microsoft Copilot, Azure AI services, and agentic automation frameworks to automate operational workflows and reduce manual effort. - Partner with platform and engineering teams to identify opportunities for AI-driven observability, predictive analytics, root cause analysis, and network optimization. - Develop and operationalize intelligent automation solutions for network provisioning, compliance validation, configuration management, and service monitoring. - Contribute to the design and implementation of AI-enabled network operations and autonomous infrastructure management capabilities. Operations & Incident Management: - Participate in on-call DRI rotations supporting Secure Edge and cloud networking services. - Lead resolution of complex networking and security incidents across hybrid and cloud environments. - Perform root cause analysis and drive long-term corrective actions. - Maintain service reliability, scalability, and operational excellence. - Collaborate with engineering and operations teams during critical incident response and service recovery activities. - Continuously improve security posture, platform health, and customer experience. Network Operations & Infrastructure: - Oversee design, deployment, operation, and support of cloud and enterprise network infrastructure. - Work extensively with Layer 3 technologies including IPv4, IPv6, BGP, MPLS, HSRP, VRRP, VXLAN, and SD-WAN. - Operate and troubleshoot large-scale environments using Cisco, Palo Alto, Arista, and Azure networking technologies. - Monitor network health using SNMP, NetFlow, sFlow, Streaming Telemetry, Azure Monitor, and related observability platforms. - Execute proofs of concept, pilots, and operational readiness activities for new networking and security technologies. Qualifications Required Qualifications: - 7+ years technical experience in network design, development, and automation - OR Bachelor's Degree in Electrical Engineering, Optical Engineering, Computer Science, Engineering, Information Technology, or related field AND 4+ years technical experience in network design, development, and automation. - OR Master's Degree in Electrical Engineering, Optical Engineering, Computer Science, Information Technology, or related field AND 3+ years technical experience in network design, development, and automation - OR Doctorate Degree in Electrical Engineering, Optical Engineering, Computer Science, Information Technology, or related field. - 7+ years of technical experience in network design, engineering, security, automation, and operations. - 7+ years of hands-on experience with cloud networking and network security technologies. - Good experience with: - Azure Networking or Azure Firewall - Palo Alto Firewalls o Azure Virtual WAN - Global Secure Access (GSA) - VPN Technologies - DNS / DHCP - Load Balancers - IDS/IPS - Proxy and Secure Web Gateway technologies - Secure Service Edge (SSE) solutions - Good understanding of: - Zero Trust Security Architecture - Network Segmentation - Identity-Aware Access Controls - Secure Connectivity Design - Security Monitoring and Incident Response - Deep experience with: BGP , MPLS , IPv4 / IPv6 , Routing and Switching and SD-WAN - Experience troubleshooting and operating large-scale cloud and enterprise networking environments using Cisco, Palo Alto, Arista, and Azure networking platforms. - Good automation and scripting skills using Python, PowerShell, Terraform, Bicep, Ansible, Azure DevOps, GitHub Actions, or similar technologies. - Ability to analyse, troubleshoot, and resolve complex networking and security problems. - Good communication, collaboration, stakeholder management, and presentation skills. Preferred Qualifications: - Experience with Global Secure Access (GSA), Secure Service Edge (SSE), or Zero Trust access platforms. - Experience designing and operating large-scale enterprise cloud networking environments. - Knowledge of Microsoft Digital infrastructure and security ecosystems. - Experience leading network modernization and cloud transformation initiatives. - Azure Networking and/or Security certifications. - Experience driving cross-functional engineering initiatives and influencing technical strategy. This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled. Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.