WSP USA Inc. seeks a Cloud DevOps & Automation Architect to shape the foundational Azure infrastructure for large-scale, customer-facing digital products across Canada. You will transform enterprise cloud patterns into reliable, secure, and scalable environments that product teams can safely consume.
What You'll Do
- Build and govern reusable Terraform/Bicep modules for Azure Landing Zones and resource provisioning.
- Implement CI/CD pipeline patterns including state management, drift detection, and standardized deployment workflows.
- Create and manage Azure Policy (including EPAC initiatives) enabling secure self-service for product and vendor teams.
- Implement FinOps-aligned cost guardrails, budgets, and alerts.
- Operationalize hub-spoke networking, private connectivity (Private Endpoints, DNS, NSG/UDR), and publish secure endpoints using Azure Front Door.
- Integrate Sentinel alerting, apply architecture-directed security controls, and embed compliance enforcement within CI/CD.
- Implement monitoring, alerting, dashboards, and external observability using Azure Monitor, Log Analytics, Sentinel, Defender for Cloud, and Grafana.
- Support incident response, runbooks, release/change management, and platform reliability practices.
- Improve delivery performance through automation, standardization, and CI/CD enablement across engineering teams.
What We're Looking For
- 10+ years in IT with extensive hands-on Azure DevOps automation, CI/CD, and secure delivery practices.
- Deep proficiency in Terraform, Bicep, GitHub Actions, and GitHub Advanced Security.
- Experience supporting production-grade, customer-facing digital products.
- Strong understanding of compliance enforcement (ISO 27001, GDPR, artifact integrity, signing, provenance).
- Skilled at cross-team collaboration with high autonomy in complex environments.
- Regular use of AI-assisted engineering tools (e.g., GitHub Copilot).
- Bachelor’s degree in IT, Computer Science, Engineering, or equivalent experience.
Technical Stack
- Azure
- Terraform
- Bicep
- GitHub Actions
- GitHub Advanced Security
- Azure Policy
- Azure Front Door
- Azure Monitor
- Log Analytics
- Azure Sentinel
- Defender for Cloud
- Grafana
Team & Environment
Work alongside platform, security, network, identity, and data architecture leaders.
Benefits & Compensation
- Flexible work, real balance
- Compensation by region:
- AB, BC, NT, NU, SK & YT: $114,600 – $151,800
- MB & ON: $104,500 – $143,900
- NB, NL, NS, PEI & QC: $97,400 – $131,200
Work Mode
This is a hybrid position based in Canada.
WSP is committed to the principles of employment equity. WSP welcomes and encourages applications from people with disabilities. Accommodations are available on request for candidates taking part in all aspects of the selection process.
