Cloud Network Architect (338)

This Opportunity WSP is one of the world’s leading professional services firms operating in over 50 countries and employs approximately 75,000 professionals, known as Visioneers. Together they pioneer solutions and deliver innovative projects in the transportation, infrastructure, environment, building, energy, water, and mining and metals sectors. Position Summary We’re seeking a hands-on Cloud Network Architect with strong DevOps automation capability to design, standardize, and deliver secure, scalable, and resilient Azure networking. This role blends network architecture authority with platform implementation discipline: you will define and govern network patterns and guardrails, and you will also build and operationalize them using Infrastructure-as-Code and CI/CD so they are repeatable, consumable, and reliable at scale. Your Impact Main Responsibilities • Azure Network Architecture & Standards • Define, document, and govern Azure networking reference architectures, standards, guardrails, and reusable patterns (segmentation, routing, DNS, private access, and network security). • Provide architectural review and formal sign-off on Azure network designs, ensuring consistency, scalability, resiliency, and security alignment (including Zero Trust-aligned controls). • Architect and maintain global connectivity patterns and cloud connectivity services that support enterprise and hybrid needs. • Network-as-Code (IaC) & Platform Enablement • Develop and maintain Infrastructure-as-Code for cloud network provisioning; champion reusable modules to make networking self-service and repeatable. • Integrate network builds into CI/CD workflows (state management, drift detection, automated validation) to enforce consistent baselines. • Implement automated baseline checks, compliance controls, configuration consistency, and telemetry pipelines for network services. • Networking & Security Implementation • Implement hub-spoke / Virtual WAN patterns across Azure regions; operationalize private connectivity (Private Endpoints, Private DNS zones, NSG/UDR patterns). • Publish secure external endpoints (Azure Front Door) and implement internal/egress routing patterns (Azure Firewall). • Troubleshoot complex cloud and hybrid network issues across. • Operations & Reliability • Implement monitoring/alerting/dashboards for network services (Azure Monitor/Log Analytics and security telemetry where applicable). • Support incident response, runbooks, and change/release coordination for network/platform changes. • Validate resiliency, DR, and continuity plans through hands-on testing; drive operational readiness and smooth transition into run-state. • Continuous Improvement • Improve delivery performance through standardization and automation; reduce lead time and increase reliability via repeatable patterns. • Partner with Security, Identity, and Platform architecture leaders to evolve network guardrails that enable delivery while protecting platform integrity. • Mentor engineers and influence roadmaps toward reusable, extensible network platform services. Who You Are Required Qualifications • 5+ years of practical, hands-on network engineering and architecture experience. • Deep expertise in Microsoft Azure networking (segmentation, routing, DNS, private access, and network security). • Expert knowledge of BGP, OSPF, DNS, DHCP, SD‑WAN, VPN/IPSec, IPv4/IPv6, and enterprise-scale troubleshooting. • Strong proficiency with IaC workflows; ability to build automated network deployments and maintain consistent baselines. • Deep hands-on experience with DevOps automation and CI/CD best practices for infrastructure delivery. • Prior participation in architecture review or governance forums. • Strong written communication: you will author and review ADRs, architecture documents, and pattern guides. • Comfortable operating with senior autonomy and collaborating across globally distributed teams.