We are looking for an Azure Network Engineer with strong hands-on experience in Azure networking, private connectivity, AKS networking, Application Gateway, private endpoints, Private DNS, route tables, NSGs, Key Vault, certificates, and troubleshooting cloud-toplant connectivity issues.
The resource will support the PlantX project post-go-live and work closely with the DevOps/IaC resource, the lead engineer, and the broader architecture team. The role will focus on Azure networking, AKS connectivity, private access, ingress/Application Gateway behavior, certificate-related issues, and operational support during hypercare and the Oct–
Dec managed-support period.
Key Responsibilities
Support Azure networking across prod and non-prod environments.
Work on VNets, subnets, NSGs, route tables, private endpoints, and Private DNS.
Support AKS networking, Kubernetes services, ingress, internal load balancer, and Application Gateway / AGIC-related troubleshooting.
Help validate connectivity between cloud-hosted workloads, plant/on-prem components, and integration endpoints.
Support Key Vault, certificate, TLS/SSL, and secret-related troubleshooting.
Assist with firewall, routing, DNS, and private connectivity investigations.
Work with DevOps/Terraform engineers to ensure networking changes are aligned with IaC.
Support production issue triage during hypercare and managed support.
Prepare/update network diagrams, troubleshooting guides, handover notes, and operational runbooks.
Collaborate with offshore, Italy, North America, client infrastructure, and security teams as needed.
Required Skills
Strong hands-on experience with Microsoft Azure networking.
Experience with VNets, subnets, NSGs, route tables, UDRs, private endpoints, and Private DNS.
Experience troubleshooting DNS, routing, firewall, and connectivity issues.
Working knowledge of Azure Application Gateway, WAF, ingress, and load balancer concepts.
AKS networking knowledge, including services, ingress, namespaces, internal/external load balancers, and pod/service connectivity.
Experience with Azure Key Vault, certificates, TLS/SSL, and managed identities.
Good understanding of hub-and-spoke network patterns and hybrid connectivity concepts.
Ability to read and understand Terraform/IaC-managed Azure infrastructure.
Basic working knowledge of Azure DevOps/GitHub workflows is preferred.
Strong documentation and communication skills.
CKAD or CKA certification is mandatory.
Preferred Skills
Experience with Application Gateway Ingress Controller / AGIC.
Exposure to Application Gateway for Containers is a plus.
Experience supporting manufacturing, plant, OT, or Industry 4.0 environments is preferred.
Familiarity with MQTT, Ignition, OPC UA, or edge-to-cloud connectivity is a plus, but not mandatory.
Experience with Azure Monitor, Log Analytics, diagnostic settings, NSG/firewall logs, and connectivity troubleshooting.
Azure certifications such as AZ-104, AZ-305, or Azure Networking certification are preferred.
Azure Networking, Vnets, Subnets, NSGs, Route Tables, UDRs, Private Endpoints, Private DNS, AKS Networking, Kubernetes, Application Gateway, WAF, AGIC, Load Balancers, Ingress, Azure Key Vault, Certificates, TLS/SSL, Managed Identities, Hub-And-Spoke Networking, Hybrid Connectivity, Terraform, IaC, Azure DevOps, GitHub, Azure Monitor, Log Analytics, Firewall, DNS, Routing, Network Troubleshooting, Cloud-To-Plant Connectivity, MQTT, Ignition, OPC UA, Edge-To-Cloud Connectivity, CKAD, CKA