Job Description

This Opportunity

WSP is one of the world’s leading professional services firms operating in over 50 countries and employs approximately 75,000 professionals, known as Visioneers. Together they pioneer solutions and deliver innovative projects in the transportation, infrastructure, environment, building, energy, water, and mining and metals sectors.

We’re seeking a hands-on Cloud Network Architect with strong DevOps automation capability to design, standardize, and deliver secure, scalable, and resilient Azure networking. This role blends network architecture authority with platform implementation discipline: you will define and govern network patterns and guardrails, and you will also build and operationalize them using Infrastructure-as-Code and CI/CD so they are repeatable, consumable, and reliable at scale.

Your Impact

Main Responsibilities

• Azure Network Architecture & Standards
• Define, document, and govern Azure networking reference architectures, standards, guardrails, and reusable patterns (segmentation, routing, DNS, private access, and network security).
• Provide architectural review and formal sign-off on Azure network designs, ensuring consistency, scalability, resiliency, and security alignment (including Zero Trust-aligned controls).
• Architect and maintain global connectivity patterns and cloud connectivity services that support enterprise and hybrid needs.
• Network-as-Code (IaC) & Platform Enablement
• Develop and maintain Infrastructure-as-Code for cloud network provisioning; champion reusable modules to make networking self-service and repeatable.
• Integrate network builds into CI/CD workflows (state management, drift detection, automated validation) to enforce consistent baselines.
• Implement automated baseline checks, compliance controls, configuration consistency, and telemetry pipelines for network services.
• Networking & Security Implementation
• Implement hub-spoke / Virtual WAN patterns across Azure regions; operationalize private connectivity (Private Endpoints, Private DNS zones, NSG/UDR patterns).
• Publish secure external endpoints (Azure Front Door) and implement internal/egress routing patterns (Azure Firewall).
• Troubleshoot complex cloud and hybrid network issues across.
• Operations & Reliability
• Implement monitoring/alerting/dashboards for network services (Azure Monitor/Log Analytics and security telemetry where applicable).
• Support incident response, runbooks, and change/release coordination for network/platform changes.
• Validate resiliency, DR, and continuity plans through hands-on testing; drive operational readiness and smooth transition into run-state.
• Continuous Improvement
• Improve delivery performance through standardization and automation; reduce lead time and increase reliability via repeatable patterns.
• Partner with Security, Identity, and Platform architecture leaders to evolve network guardrails that enable delivery while protecting platform integrity.
• Mentor engineers and influence roadmaps toward reusable, extensible network platform services.

Who You Are

Required Qualifications

• 5+ years of practical, hands-on network engineering and architecture experience.
• Deep expertise in Microsoft Azure networking (segmentation, routing, DNS, private access, and network security).
• Expert knowledge of BGP, OSPF, DNS, DHCP, SD‑WAN, VPN/IPSec, IPv4/IPv6, and enterprise-scale troubleshooting.
• Strong proficiency with IaC workflows; ability to build automated network deployments and maintain consistent baselines.
• Deep hands-on experience with DevOps automation and CI/CD best practices for infrastructure delivery.
• Prior participation in architecture review or governance forums.
• Strong written communication: you will author and review ADRs, architecture documents, and pattern guides.

• Comfortable operating with senior autonomy and collaborating across globally distributed teams.

Preferred Experience

• Multi-region Azure experience with data residency constraints.
• Experience working with third-party vendor development teams.
• FinOps exposure and cost-aware automation.

Skills / Competency / Other requirements

• Excellent written and spoken English.
• Ability to work independently with low-level supervision and in a global team distributed geographically.
• Strong organization skills (set priorities, meets deadlines, multiple simultaneous projects) and excellent documentation skills.
• Excellent analytical and diagnostic problem-solving skills with the ability of providing solutions to identified problems.
• Demonstrated experience in understanding, designing, delivering, and demonstrating compliance with information security requirements.
• Knowledge and experience in performing information security practices in the management and delivery of infrastructure and operations.

Education

• Bachelor’s degree or equivalent experience in Information Technology, Computer Science, Engineering, or a related field.
• Advanced degrees or certifications are a plus but not required.

WSP Benefits:

WSP provides a comprehensive suite of benefits focused on a providing health and financial stability throughout the employee’s career. These benefits include coverage related to medical, dental, vision, disability, and life; retirement savings; paid sick leave; paid vacation (or other personal time); paid parental leave; and paid time off for purposes of bereavement, voting, and/or attendance at naturalization proceedings.

Compensation:
Expected Salary (all locations): $86,100.00 - $150,590.00
WSP USA is providing the compensation range that the company in good faith believes it might pay and offer for this position, based on the successful applicant’s education, experience, knowledge, skills, abilities in addition to internal equity and specific geographic location. WSP USA reserves the right to ultimately pay more or less than the posted range and offer additional benefits and other compensation, depending on circumstances not related to an applicant’s sex or other status protected by local, state, and/or federal law.

Expected Salary (Colorado only): $86,100.00 - $141,350.00

WSP USA is providing the compensation range that the company in good faith believes it might pay and/or offer for this position within the state of Colorado, based on the successful applicant’s education, experience, knowledge, skills, and abilities in addition to internal equity and specific geographic location. WSP USA reserves the right to ultimately pay more or less than the posted range and offer additional benefits and other compensation, depending on circumstances not related to an applicant’s sex or other status protected by local, state, and/or federal law.

About WSP

WSP USA is the U.S. operating company of WSP, one of the world's leading engineering and professional services firms. Dedicated to serving local communities, we are engineers, planners, technical experts, strategic advisors and construction management professionals. WSP USA designs lasting solutions in the buildings, transportation, energy, water and environment markets. With more than 15,000 employees in over 300 offices across the U.S., we partner with our clients to help communities prosper.

www.wsp.com

WSP provides a flexible and agile workplace model while meeting client needs. Employees are also afforded a comprehensive suite of benefits including medical, dental, vision, disability, life, and retirement savings focused on providing health and financial stability throughout the employee’s career.

At WSP, we want to give our employees the challenges they seek to grow their careers and knowledge base. Your daily contributions to your team will be essential in meeting client objectives, goals and challenges. Are you ready to get started?

WSP USA (and all of its U.S. companies) is an Equal Opportunity Employer Race/Age/Color/Religion/Sex/Sexual Orientation/Gender Identity/National Origin/Disability or Protected Veteran Status.

The selected candidate must be authorized to work in the United States.

NOTICE TO THIRD PARTY AGENCIES:

WSP does not accept unsolicited resumes from recruiters, employment agencies, or other staffing services. Unsolicited resumes include any resume or hiring document sent to WSP in the absence of a signed Service Agreement where WSP has expressly requested recruitment/staffing services specific to the position at hand. Any unsolicited resumes, including those submitted to hiring managers or other business leaders, will become the property of WSP and WSP will have the right to hire that candidate without reservation – no fee or other compensation will be owed or paid to the recruiter, employment agency, or other staffing service.