We are seeking an experienced AI Mesh Platform Engineer to design, implement, and secure Azure networking foundations that enable scalable, isolated, and secure AI workloads. The role focuses on advanced Azure networking, private connectivity, and network isolation patterns to support AI platforms and services.
This is a hands-on engineering role requiring deep expertise in Azure virtual networking, security controls, and private connectivity for enterprise-scale and AI-focused environments.
Key Responsibilities
- Design and implement Azure Virtual Network (VNet) architectures, including hub-and-spoke models, VNet peering, and custom routing using User Defined Routes (UDRs)
- Configure and manage private connectivity, including Private Endpoints, Private Link, and Azure DNS for secure name resolution
- Support hybrid and private connectivity using ExpressRoute and/or site-to-site VPNs
- Implement and maintain Azure Firewall, routing policies, and Network Security Groups (NSGs) to enforce security and traffic control
- Design and enforce network isolation patterns for AI workloads, including:
- VNet injection for AI services and platforms
- Secure integration with API Management (APIM)
- Private access to platform and AI services via private endpoints
- Collaborate with platform, security, and AI engineering teams to ensure networking aligns with security and compliance requirements
- Troubleshoot complex network connectivity, routing, and DNS issues across environments
- Produce clear technical documentation and architecture diagrams
Required Skills and Experience
- Strong hands-on experience with Azure networking at enterprise scale
- Proven expertise designing hub-and-spoke Azure network architectures
- Deep understanding of VNet peering, UDRs, and Azure routing behaviour
- Extensive experience with Azure Private Endpoints, Private DNS Zones, and private resolution patterns
- Solid experience configuring and managing Azure Firewall and NSGs
- Experience with ExpressRoute and VPN connectivity
- Strong understanding of network isolation and security principles, particularly for sensitive or AI-driven workloads
- Experience supporting AI or data platforms in secure, private Azure environments
- Ability to work independently in a fast-paced, delivery-focused contract role
Nice to Have
- Experience working on AI platform or AI mesh architectures
- Familiarity with Zero Trust networking principles in Azure
- Infrastructure-as-Code experience (e.g. Bicep, Terraform)
- Experience working in regulated or security-sensitive environments
