Azure Network Support Engineer

Role: Azure Network Support Engineer

Location: London, UK

Is it Permanent/ Contract: Contract

Is it Onsite/Remote/Hybrid: Onsite

Job Brief: Azure Network Support Engineer

Overview:

We are looking for an Azure Network Support Engineer who has core experience supporting networking technologies in Azure. The engineer will also have excellent technical skills on firewall technologies specifically Palo Alto and can adapt to changing needs in an agile environment.

The Azure Network Support Engineer will be aligned to the VWAN Support Services ( as described below ) and will take handover from the project team and provide ongoing support for the network changes and migrations supporting the needs of each of our business units.

Responsibilities:

• Creating support documentation for handover provided by project team including using shadowing and reverse shadowing techniques.
• Able to support migrations happening from current Hub and Spoke architecture to Secure vWAN hub in Azure.
• Be an integral part of the squad and act as the go-to person for network support requirements.
• Can work independently on support issues and escalate incidents with vendors where required including ensuring ownership until incident resolution.
• Collaborate with engineers, testers, and other team members for migration work, DR tests etc including working paid additional / out of hours where applicable.
• Communicate effectively with all levels of stakeholders, both verbally and in writing.

Requirements:

1. Azure networking (NSG, VNet peering, UDR, Route Table, Private Link/Endpoint, Load balancer).
2. Deployment and support experience of Azure vWAN Hub and Palo Alto Cloud NGFW.
3. Build VPNs with other cloud providers and appliances.
4. Palo Software and Cloud NGFW in Azure. This will include management of Advanced Threat Protection features like Antivirus, Antispyware, Vulnerability protection, URL filtering, file blocking and Wildfire in addition to firewall rules.
5. Checkpoint and Azure Firewall (desirable).
6. Azure DNS.
7. Infoblox DDI.
8. Expressroute and VNET gateways.
9. Infrastructure as Code Management - Terraform, Azure ADO (desirable).

Location and Duration:

This is a contract position ideally based in UK or in the US. The duration of the statement of work is 6 months, with a possibility of extension, depending on the project needs and performance.

The engineer will need to work US hours primarily (2 pm to 10 pm GMT/BST if UK based, 9 am to 5 pm EST if US based). Hiscox will consider 1 individual or 2 sharing the role to cover the hours effectively. Please confirm your proposal for either and both options.

VWAN Support Services - For information:

Hiscox is implementing the Azure Virtual Wan solution to address their current solution limitations in connectivity, security, and scalability. It is a business-critical change and we require experienced vWAN SMEs to manage the service once in operations, automating incident detection and escalation processes where possible.

Service Scope:

1. vWAN 24 x 7 support:
2. Monitor and troubleshoot Azure VWan network infrastructure using Azure monitor and solarwinds.
3. Proactively identify, manage and resolve events and incidents and problems.
4. Proactive reporting and management information.
5. Use of existing and new Hiscox tools.
6. Routing Intent and Routing policies including exceptions where appropriate.
7. Management of Palo Alto Cloud NGFW integrated into vWAN hub. This will include management of Advanced Threat Protection features like Antivirus, Antispyware, Vulnerability protection, URL filtering, file blocking and Wildfire in addition to firewall rules.
8. VPN monitoring (Microsoft Native solution) including failover and failback when there is an outage/maintenance where automated failover and failback is not available, diagnostics and troubleshooting.