Principal Cloud Engineer Azure

BMO is a financial services organization seeking a Principal Azure Platform Engineer to support its Azure cloud ecosystem. The role designs, builds, operates, and secures scalable Azure infrastructure, platform services, DevOps capabilities, and Infrastructure-as-Code solutions while partnering with engineering, security, and risk teams.

Responsibilities:

• Design, build, and operate Azure cloud infrastructure and shared platform services supporting digital workloads
• Implement and maintain Azure landing zones, subscriptions, networking, identity, and governance
• Build Azure PaaS, containers, and managed services as reusable platform capabilities
• Ensure platforms meet requirements for scalability, resilience, performance, cost efficiency, and reuse
• Apply DevOps and SRE practices, including CI/CD, monitoring, alerting, and operational readiness
• Build and operationalize foundational platform services and tooling that enable engineering teams to build, deploy, and operate solutions on Azure
• Partner with engineering teams to provide standardized Azure platform capabilities, deployment patterns, and paved-road solutions for cloud adoption
• Design and maintain Infrastructure as Code using GitHub Actions, Terraform, or CDKTF‑based frameworks
• Create reusable, modular deployment patterns that balance self‑service with governance
• Automate environment provisioning, configuration, and policy enforcement across environments
• Build and operationalize DevOps and Infrastructure-as-Code platform capabilities to support the rapid growth of the Azure platform
• Develop foundational automation and tooling used by engineering teams to provision environments and deploy solutions to Azure consistently and securely
• Apply security‑by‑design principles across identity, networking, encryption, secrets management, and auditability
• Ensure Azure solutions comply with security, privacy, data governance, and regulatory requirements
• Support architecture reviews, risk assessments, and audits in partnership with security and risk teams
• Design platforms with observability, traceability, and operational controls enabled by default through standardized platform guardrails and shared engineering tooling

Requirements:

• • Hands‑on experience engineering solutions on Microsoft Azure in large‑scale or regulated environments
• • Strong understanding of Azure platforming, networking, identity, access management, and governance, including shared platform services and foundational cloud capabilities
• • Experience designing for scalability, reliability, performance, and cost efficiency
• • Proven ability to troubleshoot and operate production Azure environments
• • Experience with Infrastructure as Code using GitHub Actions, ARM, Terraform, or similar tools
• • Experience building and operating CI/CD pipelines for infrastructure and application delivery
• • Experience building reusable deployment frameworks, foundational automation, or internal platform tooling that enable engineering teams to deploy to Azure
• • Familiarity with IAM models, role definitions, and least‑privilege access patterns
• • Experience with Azure API Management or similar API gateway solutions
• • Understanding of secure service exposure, rate limiting, and API lifecycle management
• • Bachelor's Degree in a relevant field (Computer Science, Engineering)
• • 10+ years of experience in cloud engineering, platform engineering leadership, or infrastructure roles
• • Proven experience delivering and operating Azure environments
• • Experience designing, implementing and delivering large scale Azure platforms
• • Experience building foundational cloud platform capabilities, engineering enablement tooling, or shared services for internal development teams
• • Experience driving large projects, where you have demonstrated leadership skills, partnering with technology teams and leaders, building horizontal capabilities across the enterprise
• • Experience implementing monitoring, logging, alerting, and operational dashboards
• • Familiarity with SRE concepts such as SLIs, SLOs, and resilience patterns