Principal Azure Cloud Engineer

Application Deadline:

09/29/2026 Address:
320 S Canal Street Job Family Group:
Technology About the Role

As a Principal Azure Platform Engineer, you will play a hands‑on engineering role within BMO ’s Azure cloud ecosystem. You will be responsible for designing, building, and operating secure, scalable Azure infrastructure and platform services, including foundational DevOps and Infrastructure-as-Code capabilities, that enable workloads at scale.

This role blends deep technical execution with strong cross‑functional collaboration. You will work in agile, cross‑functional pods with cloud engineering, data engineering teams, and security and risk partners to evolve BMO ’s Azure cloud services. You will help define and implement and delivery of and operationalize Azure platform capabilities, reusable deployment patterns, and foundational services across the Azure ecosystem and guide teams in adopting operational excellence.
Key Responsibilities

Cloud Engineering & Platform Delivery

- Design, build, and operate Azure cloud infrastructure and shared platform services supporting digital workloads.

- Implement and maintain Azure landing zones, subscriptions, networking, identity, and governance.

- Build Azure PaaS, containers, and managed services as reusable platform capabilities.

- Ensure platforms meet requirements for scalability, resilience, performance, cost efficiency, and reuse.

- Apply DevOps and SRE practices, including CI/CD, monitoring, alerting, and operational readiness.

- Build and operationalize foundational platform services and tooling that enable engineering teams to build, deploy, and operate solutions on Azure.

- Partner with engineering teams to provide standardized Azure platform capabilities, deployment patterns, and paved-road solutions for cloud adoption.

Infrastructure as Code & Automation

- Design and maintain Infrastructure as Code using GitHub Actions, Terraform, or CDKTF‑based frameworks.

- Create reusable, modular deployment patterns that balance self‑service with governance.

- Automate environment provisioning, configuration, and policy enforcement across environments.

- Build and operationalize DevOps and Infrastructure-as-Code platform capabilities to support the rapid growth of the Azure platform.

- Develop foundational automation and tooling used by engineering teams to provision environments and deploy solutions to Azure consistently and securely.

Security, Governance & Risk

- Apply security‑by‑design principles across identity, networking, encryption, secrets management, and auditability.

- Ensure Azure solutions comply with security, privacy, data governance, and regulatory requirements.

- Support architecture reviews, risk assessments, and audits in partnership with security and risk teams.

- Design platforms with observability, traceability, and operational controls enabled by default through standardized platform guardrails and shared engineering tooling.

Required Technical Skills & Competencies

Core Azure Cloud Engineering (Must-have)

- Hands‑on experience engineering solutions on Microsoft Azure in large‑scale or regulated environments.

- Strong understanding of Azure platforming, networking, identity, access management, and governance, including shared platform services and foundational cloud capabilities.

- Experience designing for scalability, reliability, performance, and cost efficiency.

- Proven ability to troubleshoot and operate production Azure environments.

Infrastructure as Code & DevOps (Must-have)

- Experience with Infrastructure as Code using GitHub Actions, ARM, Terraform, or similar tools.

- Experience building and operating CI/CD pipelines for infrastructure and application delivery.

- Experience building reusable deployment frameworks, foundational automation, or internal platform tooling that enable engineering teams to deploy to Azure.

- Familiarity with IAM models, role definitions, and least‑privilege access patterns.

Cloud‑Native I