Job Title: Network & Cloud Intern- Azure Infrastructure
Zug, ZG, CH, 6300
EnerSys is a global leader in stored energy solutions for industrial applications. We have over thirty manufacturing and assembly plants worldwide servicing over 10,000 customers in more than 100 countries. Worldwide headquarters are located in Reading, PA, USA with regional headquarters in Europe and Asia. We complement our extensive line of Motive Power and Energy Systems with a full range of integrated services and systems. With sales and service locations throughout the world, and over 100 years of battery experience, EnerSys is the power/full solution for stored DC power products.
Motive Power applications include industrial lift trucks and pallet jacks, rail equipment, mining equipment, and airline ground support equipment. Some of the motive power brands include Hawker, Ironclad, General Battery, and Fiamm. Wherever there is a need for motive power, EnerSys offers the perfect energy solution.
About the role
This is an 6 -12 month internship for someone who already has a foundation in networking and cloud concepts and is ready to apply and grow that knowledge in a real enterprise environment. You will join our Network & Cloud Architecture team and be mentored by experienced Azure engineers throughout.
You will work in a supervised, non-production Azure sandbox environment — building proof-of-concept deployments, writing infrastructure code, and producing a capstone architecture deliverable by the end of the programme. We will stretch and develop what you already know. We will not be teaching fundamentals from scratch.
What you will work on
Under supervision, using a safe sandbox Azure environment, you will:
- Design an Azure network reference architecture based on provided requirements (e.g. hub-and-spoke, segmentation, shared services, connectivity patterns)
- Build a proof-of-concept deployment in Azure, covering:
- Virtual Networks (VNets), subnets, route tables, and User Defined Routes (UDRs)
- Network Security Groups (NSGs) and traffic segmentatio
- Azure Firewall policy concepts
- Private Link and Private Endpoints
- VPN Gateway and ExpressRoute concepts
- Azure DNS and name resolution paths
- AKS networking fundamentals — cluster integration, ingress, private cluster patterns
- Azure App Service VNet integration and private access patterns
- Azure Database for PostgreSQL – Flexible Server connectivity and DNS considerations
- Azure Cosmos DB private endpoint and service integration patterns
- Implement infrastructure using Terraform, following good engineering practices:
- Git-based workflows — branching, pull requests, code reviews
- Documentation — READMEs, architecture diagrams, decision records
- Optional: basic CI checks (format, lint, plan)
- Create a connectivity validation plan and perform structured troubleshooting using Azure Monitor, Log Analytics, and Network Watcher
- Produce a final Architecture Pack — diagrams, key decisions, and a short presentation to the architecture team
What you will learn
- How architects translate requirements into secure, scalable cloud network designs
- How to reason about tradeoffs across security, availability, cost, and operability
- How to build reproducible cloud environments using Infrastructure-as-Code
- How to validate and troubleshoot network connectivity using evidence-based methods
- How to communicate architecture clearly through diagrams and concise documentation
What we are looking for
We care about attitude and potential — but you must arrive with a solid technical foundation. We will build on what you know; we will not start from zero. The requirements below are not negotiable,
Networking Fundamentals — Required
You must have a working understanding of core networking concepts, whether from a college module, Cisco NetAcad, CompTIA Network+ study, or rigorous self-study. You should be able to explain:
- IP addressing and subnetting — what a /24 means, how to calculate a subnet range
- How DNS works — what a resolver does, the difference between A records and CNAMEs
- Routing basics — what a default gateway is, what a route table does
- The purpose of firewalls and basic security rules — allow/deny, ports, protocols
- TCP vs UDP and when each is used
Microsoft Azure — Required
You must have real, hands-on exposure to Azure before joining. Reading about it is not sufficient. At minimum, you should have:
- Created an Azure free account and deployed resources yourself — a VM, a storage account, a virtual network, or equivalent
- A working understanding of what a VNet and subnet are, and how Azure resources connect to each other and to the internet
- Navigated the Azure Portal independently to build or configure something
- Azure certifications, or actively studying for it — this is strongly preferred and demonstrates genuine commitment to the platform
Scripting or Code — Required
You must have written and executed code or scripts before joining, in any language. We are not looking for a developer, but you need to be comfortable in a terminal and able to follow and adapt code from examples. Experience with any of the following counts:
- PowerShell, Python, or Bash
- Terraform or OpenTofu — even from a guided tutorial
- Any scripting project, however small, including personal or hobby work
General
- Comfortable writing clear technical notes and following structured workflows
- Git basics — cloning a repo, committing, pushing
- You are a school leaver, college student, or career changer — no degree required
BONUS POINTS (NOT REQUIRED)
- AZ-700 or networking-focused Azure learning in progress
- Exposure to hub-and-spoke networking, firewall concepts, or private connectivity patterns
- Familiarity with CI/CD pipelines or code review practices
- Any personal cloud projects, labs, or home lab networking experience
EnerSys provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.
We use artificial intelligence to screen, assess and select applicants for open positions, including for the purposes of reviewing and ranking application materials and scoring answers to application questions. Accordingly, decisions about your application and eligibility for employment with EnerSys may be made based exclusively on the automated processing of the personal information that you submit in your application materials.