Description

1. Design and implement secure enterprise-grade identity workflows for cross-cloud integrations (e.g., AWS customers consuming services via Azure API Management/Azure AI Foundry), ensuring least-privilege access and strong authentication/authorization controls.
2. Architect and manage Azure API Management (APIM) deployments, configuring both internal and external networking modes based on exposure requirements, and clearly define access boundaries between them.
3. Evaluate, recommend, and implement hybrid connectivity solutions — including Site-to-Site VPN and ExpressRoute — based on bandwidth, latency, security, and SLA requirements.
4. Design private, secure inter-system communication channels between different subscriptions and VNets (e.g., VNet Peering, Private Link, Private Endpoints) while eliminating reliance on public IP exposure.
5. Set up and manage Log Analytics workspaces with custom query packs (KQL) to monitor API traffic, network flows, and security events across the environment.
6. Implement network segmentation strategies using NSGs, Azure Firewall, and route tables to enforce zero-trust principles across VNets and subnets.
7. Manage identity and access controls using Azure AD (Entra ID), including conditional access policies, managed identities, and RBAC for network and API resources.
8. Monitor, troubleshoot, and optimize network performance and security posture using Azure Monitor, Network Watcher, and Microsoft Defender for Cloud.
9. Collaborate with cross-functional teams (DevOps, Security, Cloud Architecture) to ensure network designs align with compliance, governance, and enterprise security standards.
10. Document network architectures, security policies, and standard operating procedures, and provide guidance/mentorship on Azure networking and security best practices.

Required Skills

• Strong hands-on experience with Azure Networking (VNets, Peering, Private Link, ExpressRoute, VPN Gateway)
• Experience with Azure API Management (internal/external modes)
• Familiarity with AWS-to-Azure integration patterns is a plus
• Working knowledge of Azure Monitor / Log Analytics / KQL
• Understanding of Azure AD identity and access management
• Knowledge of network security best practices (Zero Trust, NSGs, Firewalls)

Key Skills

Education

Bachelor's degree