We are looking for a Cloud Engineer to support a Contract engagement focused on strengthening Azure network governance in Kansas City, Missouri. This role will evaluate the current cloud networking environment, identify control gaps, and implement policy-based guardrails aligned with defined security standards. The position is ideal for a hands-on, detail-oriented individual who can translate network security requirements into tested Azure Policy configurations and practical enforcement mechanisms.
Responsibilities:
- Assess two Azure subscriptions to understand existing network architecture, security configurations, and control coverage.
- Examine components such as virtual networks, network security groups, routing paths, firewalls, and private endpoints to determine alignment with required standards.
- Identify deficiencies against established network control expectations and document findings with clear supporting evidence.
- Design, build, and validate Azure Policies that audit and enforce network-related security requirements.
- Integrate policy deployment activities into CI/CD workflows to support consistent and repeatable implementation.
- Establish and test guardrails for key boundary areas, including administrative or internet-facing access, private access to platform services, routed traffic through hub or security layers, and exposure of public network configurations.
- Produce organized technical documentation covering assessments, policy logic, test results, and compliance evidence.
- Work closely with stakeholders to review outcomes, refine enforcement approaches, and support controlled testing within the designated subscription scope.
- Hands-on experience engineering and securing Microsoft Azure environments, with strong knowledge of cloud networking concepts.
- Demonstrated ability to create, test, and deploy Azure Policy for audit and enforcement use cases.
- Solid understanding of Azure networking services, including VNets, NSGs, routing, firewalls, and private endpoints.
- Experience performing security or compliance reviews against defined control frameworks or network standards.
- Familiarity with CI/CD practices and automation approaches that support infrastructure or policy deployment.
- Strong documentation skills with the ability to clearly capture technical gaps, remediation steps, and evidence.
- Ability to work independently in a delivery-focused Contract role while collaborating effectively with client stakeholders.