DevOps Engineer I (Azure Network Infrastructure)

ATS+Partners•City of Albany, NY

18d

About The Position

ATS+Partners is hiring a DevOps Engineer I with strong Microsoft Azure networking expertise to support mission-critical cloud infrastructure initiatives. This role involves managing and leading the orchestration of multi-discipline technologies for complex problem resolution, communicating with technology and business leaders, and making recommendations for system enhancements. The position requires 24x7x365 on-call network support on a rotating basis. Responsibilities include designing, deploying, and maintaining cloud networking infrastructure in AWS, Azure, and GCP, as well as virtual appliances like Arista CloudEOS and Palo Alto PAN-OS. The role also involves designing and implementing on-prem to cloud connectivity, assisting with application design for compliance with NYS ITS information security standards, and collaborating with connectivity providers. A key aspect is assisting in the development of Infrastructure as Code (IaC) using Terraform for cloud configuration, deployment, and backup solutions. The engineer will perform in-depth network performance analysis using various monitoring tools, ensure maximum network availability through change control and monitoring, and participate in network performance analysis, training, and capacity planning. Documentation using Microsoft Visio and knowledge transfer to junior staff are also expected. Occasional travel may be required.

Requirements

Level I- Between three (3) and seven (7) years of experience as a DevOps Engineer
Expert Microsoft Azure network infrastructure: VNets, subnets, NSGs, route tables, VNGs, Site-to-site VPN, ExpressRoute Direct, load balancers, logging, alerting, and troubleshooting.
Advanced experience designing, implementing, and supporting hybrid Microsoft Azure connectivity.
Proficiency in layer 3 routing including Border Gateway Protocol (BGP), VRFs, route maps, redistribution, NAT, subnetting, etc.
Proficiency in Palo Alto PAN-OS including security policies, NAT policies, zones, routing, tunnels, upgrades, logging, and monitoring
Working knowledge of cloud application platforms and their networking requirements (Kubernetes engines/services, serverless, etc.)
Proficiency in Terraform to assist in the development of Infrastructure as Code (IaC) and CI/CD for uniform cloud configuration and backup solutions
Proficient AWS network infrastructure: VPCs, subnets, security groups, route tables, Virtual Private GW, Transit Gateway, Cloud WAN, Site-to-Site VPN, Direct Connect, NACLs, load balancers, peering, logging, alerting, and troubleshooting.
Proficient GCP network infrastructure: VPCs, subnets, firewall rules, VPC routing, Network Connectivity Center, Cloud Router, CloudVPN, Cloud Interconnect, CloudNAT, load balancers, private service connections, logging, alerting, and troubleshooting.
Experience working with monitoring and packet capture/analysis tools such as Zenoss, Splunk, Palo Alto Panorama, Arista Cloud Vision as a Service, NfSen, Ixia, Gigastor, Wireshark, etc
Proficiency in Microsoft Visio for solutions documentation
Proficiency in Domain Name System (DNS) and managing split-brain public/private resolution designs

Nice To Haves

Occasional travel may be required.

Responsibilities

Provide 24x7x365 on-call network support for advanced troubleshooting, escalation and ticket resolutions on a rotating basis
Design, deploy, and maintain cloud networking infrastructure in AWS, Azure, and GCP to support new and existing NYS agency application deployments in the cloud
Design, deploy, and maintain network virtual appliances as needed including Arista CloudEOS and Palo Alto PAN-OS with integrations into CSP network infrastructure (GCP NCC, AWS TGW Connect, etc.)
Design and implement on-prem to cloud connectivity solutions as required by application needs in collaboration with ISO and network/application architecture teams
Assist with application design to ensure connectivity compliance with NYS ITS information security standards
Collaborate and troubleshoot with direct cloud connectivity providers to develop solutions and solve problems
Assist in the development of Infrastructure as Code (IaC) uniform cloud configuration, deployment, and backup solutions using Terraform
Provide in-depth analysis on network performance using monitoring tools such as Zenoss, Splunk, Palo Alto Panorama, Arista Cloud Vision as a Service, NfSen, Ixia, Gigastor, Wireshark, etc.
Ensure that network availability of cloud environments is maximized by overseeing Change Control procedures, code upgrades, network monitoring, installations, moves and changes, and troubleshooting complex issues.
Oversee network monitoring to ensure maximum network availability.
Participate in network performance analysis, training, and capacity planning.
Document all design and implementation work using Microsoft Visio
Participate in knowledge transfer and training sessions with junior staff