Cloud Network Architect
Role details
Job location
Tech stack
Job description
We are seeking a highly skilled and hands-on Cloud Network Architect to join WSP's Global IT organization supporting its internal employees. Reporting to the manager of Network Architecture & Design, you will be responsible for the design, evolution, governance, and implementation of enterprise cloud networking solutions, with a primary focus on Microsoft Azure.
We are looking for a practitioner who combines strategic thinking with real-world engineering experience. You will design and build scalable, secure, and resilient cloud connectivity services that support WSP's global operations and Zero Trust ambitions. You will also partner closely with platform engineering to embed DevOps and automation practices into cloud network delivery and operations.
A little more about your role…
- Design end-to-end Azure networking architectures, including segmentation, routing, DNS, private access, and network security.
- Architect and maintain global cloud connectivity patterns.
- Define cloud networking standards, reference architectures, guardrails, and reusable design patterns.
- Collaborate with Security Architecture to design identity-driven, Zero Trust-aligned network controls.
- Serve as architecture authority for cloud networking across major programs and initiatives.
- Build, configure, and optimize cloud networking components.
- Deploy, tune, and secure cloud firewalls, proxies, and enforcement points.
- Troubleshoot complex cloud and hybrid network issues across L3-L7.
- Validate resiliency, DR, and continuity plans through hands-on testing.
- Develop and maintain Infrastructure-as-Code for cloud network provisioning using modular, reusable patterns.
- Integrate cloud network builds into CI/CD workflows including automated testing and promotion between environments.
- Implement automated baseline checks, compliance controls, configuration consistency, and drift detection using policy-as-code and guardrails.
- Build automation for operational tasks and standard remediation to reduce manual toil.
- Implement and maintain telemetry/observability pipelines to enable proactive detection and performance optimization.
- Champion reusable modules, automation patterns, GitOps practices, and engineering best practices across teams.
- Optimize network performance, routing, and traffic flows across cloud and hybrid landscapes.
- Provide expert guidance to Network Engineers, Cloud Engineers, project managers, and business stakeholders.
- Evaluate emerging cloud networking technologies and influence strategic roadmaps.
- Mentor engineering teams developing cloud-first skills and modern automation capabilities., We are committed to supporting our people, giving you the tools to make improvements to your health and wellbeing through our Thrive programme.
Our Virtual GP service gives you access to an NHS or Irish Medical Council GP at a time and place that suits you - giving you peace of mind and quick access to medical advice when you need it most. We also provide reasonable workplace adjustments for those in need. Additionally, you can benefit from the Gymflex scheme, which offers up to 40% off annual gym memberships through our WSP flexible benefits program, as well as a comprehensive menopause support package.
Flex your time
To enhance work-life balance, WSP offers the "WSP My Hour," allowing you to take one hour each day for personal activities, with the flexibility to make up the time earlier or later that day.
We also provide part-time and flexible working arrangements, the option to purchase additional leave, and the ability to use your bank holiday entitlement to suit you.
Your development
We understand the importance of development and training to you. That's why we foster a supportive environment that invests in your growth, whether through training, mentoring, or Chartership.
#WeAreWSP
Here at WSP we positively encourage applications from suitably qualified and eligible candidates regardless of sex, race, disability, age, sexual orientation, gender reassignment, religion or belief, marital status, pregnancy or maternity/paternity. As a Disability Confident leader, we will interview all disabled applicants who meet the essential criteria, please let us know if you require any workplace adjustments in support of your application.
Requirements
- Bachelor's degree in computer science, Information Technology, Engineering, or equivalent experience.
- Significant practical, hands-on network engineering and architecture experience.
- Deep expertise in Microsoft Azure networking.
- Strong understanding of hybrid connectivity patterns and data center interconnect architectures.
- Experience integrating cloud networks with SSE/SASE platforms (Zscaler ZIA/ZPA preferred).
- Strong understanding of segmentation models, identity-based access, and cloud-native security policies.
- Strong proficiency with Terraform, Ansible, GitHub, and CI/CD workflows.
- Experience with GitOps practices, modular IaC design, and automated governance controls.
- Scripting and automation skills and experience with API-driven workflows.
- Knowledge of other clouds (AWS, GCP, OCI) is beneficial.
- Experience with container networking is an advantage.
- Strong architectural documentation and diagramming capability.
- Ability to communicate complex designs to both technical and non-technical audiences.
- Comfortable collaborating within a large, globally distributed enterprise.