Principal Azure Cloud Platform Engineer

About

The Role

As a Principal Azure Platform Engineer, you will play a hands‑on engineering role within BMO’s Azure cloud ecosystem. You will be responsible for designing, building, and operating secure, scalable Azure infrastructure and platform services, including foundational Dev Ops and Infrastructure-as-Code capabilities, that enable workloads at scale.

This role blends deep technical execution with strong cross‑functional collaboration. You will work in agile, cross‑functional pods with cloud engineering, data engineering teams, and security and risk partners to evolve BMO’s Azure cloud services. You will help define and implement delivery of and operationalize Azure platform capabilities, reusable deployment patterns, and foundational services across the Azure ecosystem and guide teams in adopting operational excellence.

• Design, build, and operate Azure cloud infrastructure and shared platform services supporting digital workloads.
• Implement and maintain Azure landing zones, subscriptions, networking, identity, and governance.
• Build Azure PaaS, containers, and managed services as reusable platform capabilities.
• Ensure platforms meet requirements for scalability, resilience, performance, cost efficiency, and reuse.
• Apply Dev Ops and SRE practices, including CI/CD, monitoring, alerting, and operational readiness.
• Build and operationalize foundational platform services and tooling that enable engineering teams to build, deploy, and operate solutions on Azure.
• Partner with engineering teams to provide standardized Azure platform capabilities, deployment patterns, and paved‑road solutions for cloud adoption.

• Design and maintain Infrastructure as Code using Git Hub Actions, Terraform, or CDKTF‑based frameworks.
• Create reusable, modular deployment patterns that balance self‑service with governance.
• Automate environment provisioning, configuration, and policy enforcement across environments.
• Build and operationalize Dev Ops and Infrastructure-as-Code platform capabilities to support the rapid growth of the Azure platform.
• Develop foundational automation and tooling used by engineering teams to provision environments and deploy solutions to Azure consistently and securely.

• Apply security‑by‑design principles across identity, networking, encryption, secrets management, and auditability.
• Ensure Azure solutions comply with security, privacy, data governance, and regulatory requirements.
• Support architecture reviews, risk assessments, and audits in partnership with security and risk teams.
• Design platforms with observability, traceability, and operational controls enabled by default through standardized platform guardrails and shared engineering tooling.

• Hands‑on experience engineering solutions on Microsoft Azure in large‑scale or regulated environments.
• Strong understanding of Azure platforming, networking, identity, access management, and governance, including shared platform services and foundational cloud capabilities.
• Experience designing for scalability, reliability, performance, and cost efficiency.
• Proven ability to troubleshoot and operate production Azure environments.

• Experience with Infrastructure as Code using Git Hub Actions, ARM, Terraform, or similar tools.
• Experience building and operating CI/CD pipelines for infrastructure and application delivery.
• Experience building reusable deployment frameworks, foundational automation, or internal platform tooling that enable engineering teams to deploy to Azure.
• Familiarity with IAM models, role definitions, and least‑privilege access patterns.

• Experience with Azure API Management or similar API gateway solutions.
• Understanding of secure service exposure, rate limiting, and API lifecycle management.

• Experience implementing monitoring, logging, alerting, and operational dashboards.
• Familiarity with SRE concepts such as SLIs, SLOs, and resilience patterns.