Azure Network Consultant

An opportunity has arisen for an Azure Network Consultant to join CACI's consultancy, with an initial customer engagement to develop a secure hybrid cloud platform and support workload migration. This requires an expert-level knowledge of Azure Networking and Security, automation tools, and techniques such as Terraform and RESTful API integration (Azure Management API). Previous experience working within consultancy and familiarity with Cisco, Palo Alto, and VMware products would be beneficial. Initial Engagement Responsibilities:

• Engaging with customer stakeholders to document the Azure HLD
• Working with the CACI team to develop Terraform IaC scripts to deploy the solution
• Supporting the customer engineering teams in their workload migration, eg, with Firewall configuration, solution scaling, etc.
• Collaborating with customer Network and Security teams to advise on decommissioning or device reconfiguration following migration.
• Future customer engagements might include leading initial scoping conversations, feasibility studies, proofs of concept, design, deployment, testing, and migration phases of a wide variety of solutions to customer concerns.
  
  Expert knowledge of Azure architecture, particularly networking and security capabilities and limitations. Hot points include Landing Zones, VNET Peering, Route Tables (including UDRs), ExpressRoute, and NSGs
• Expert knowledge of SDCI underlays (eg, Equinix Fabric, Megaport, etc.) and related Service Provider networking such as q-in-q and Carrier Ethernet
• IaC technologies such as Terraform and Ansible, and DevOps practices such as CI/CD-based deployment and Unit Testing
• Cisco secure routing and switching technologies, specifically BGP traffic engineering techniques (eg, Route Reflectors, Peering, AS_PATH Influence, Internet Exchange (IXP) and Transit)
• Network Security skills utilising NAT, ACL, and IPS/IDS to integrate Firewall NVAs with native Azure cloud constructs
• Palo Alto platform management and configuration
• Working knowledge of RESTful API interaction such as JSON and using third-party integration libraries
• Experience architecting, designing and deploying Azure Landing Zones in alignment to best practices such as the Microsoft Cloud Adoption Framework (CAF) for Azure
• Exposure to Cisco-specific automation technologies such as Embedded Event Manager (EEM) and Guest Shell
• Working knowledge of Linux automation using Cron, Bash, and Package Managers
• Bootstrapping and Zero-Touch Provisioning (ZTP) techniques such as cloud-init and Azure Boot Script injection
• Experience with Python coding techniques, libraries and Package Management technologies (such as PyPi and self-hosted Wheel mirrors)
• Client-facing skills to run engagements from director-level scoping to engineering team workshops
Preferred Certifications:
• Microsoft Azure Certified Azure Network Engineer Associate
• Palo Alto Networks Certified Network Security Engineer (PCNSE)
• Cisco Certified Network Professional (CCNP)
• HashiCorp Certified Terraform Associate
  
  CACI Network Services develops individuals through a portfolio of training and development options such as certified training courses, workshops, technical conferences, boot camps, on-line training and much more. You will have the opportunity to work on some of the most advanced networking hardware in the industry as well as development of your abilities and talents to become one of the best in the field.
  
  In return you will be awarded with a competitive salary, excellent benefits and the opportunity to develop your career and skills within a growing company.