Senior DevOps Engineer (Azure Infrastructure & Platform)

We are hiring a Senior DevOps Engineer to join a fast-growing, CDIC-insured, federally regulated Canadian digital bank undergoing an active technology transformation. Unlike typical DevOps positions focused solely on writing CI/CD pipelines, this is a true Cloud Infrastructure & Platform Engineering role. You will report directly to the Lead Cloud Engineer and take end-to-end ownership of how cloud infrastructure, secure network architecture, and containerized platforms are architected, provisioned, and scaled across Azure (primary) and AWS. If you are a hands-on engineer who thrives in high-ownership environments, understands deep Azure networking (beyond basic Terraform modules), and wants your work to carry real regulatory weight, this is the role for you. Why Join This Team? • Real Scope & Ownership: Work in a tight-knit, high-impact engineering team in Downtown Toronto where your voice matters—no silos or rigid bureaucracy. • Active Tech Transformation: Build brand-new digital banking and lending infrastructure from the ground up, not just maintaining legacy systems. • High Career Value: Gain deep, portable experience in a heavily regulated banking environment with continuous investment in modern cloud tooling. Core Responsibilities • Cloud Infrastructure via IaC: Provision and manage scalable production environments in Azure (and secondary AWS workloads) using modular Terraform as your primary tool. • End-to-End Azure Network Architecture: Design and optimize secure Hub-and-Spoke VNets, subnets, NSGs, Azure Firewalls, Application Gateways (WAF), Front Door, Private Endpoints, and Private Link. • Containerization & Orchestration: Package microservices with Docker and manage container workloads on Kubernetes (AKS). • SDLC & DevSecOps Integration: Embed security and compliance controls across the entire software development lifecycle, integrating code scanning (Snyk, SonarQube), artifact management (Nexus), and secrets rotation (Vault). • Automated Pipelines: Build and optimize CI/CD pipelines using GitHub Actions and Azure DevOps. • Proactive Monitoring & Incident Response: Implement robust logging, alerting, and telemetry using Azure Monitor and CloudWatch to maintain 99.9%+ platform availability. What We Are Looking For • 7+ years of hands-on experience in DevOps, Cloud Platform, or Infrastructure Engineering (flexible down to 5–6 years for exceptional Azure depth). • Deep Azure Networking Expertise: Proven track record designing hub-and-spoke networks, firewall placement, routing tables, and Private Link security controls. • Strong Infrastructure as Code (IaC): Production experience writing, structuring, and managing state in Terraform. • Containerization & Kubernetes: Solid hands-on experience with Docker and managed Kubernetes (AKS). • Scripting Proficiency: Advanced scripting abilities in Bash, PowerShell, or Python. • Regulated Environment Experience: Familiarity with financial compliance, OSFI, PCI-DSS, or zero-trust security frameworks. • Collaborative Mindset: A vocal engineer who participates actively in architectural discussions, challenges technical proposals constructively, and thrives in daily standups. Nice-to-Haves • Certifications: Azure DevOps Engineer Expert, HashiCorp Terraform Associate, or CKA/CKAD. • Secondary exposure to AWS infrastructure or database migrations. • Hands‑on experience with Zero Trust / SASE network architectures or Okta integrations. Work Model & Location: hybrid schedule - 3 days on-site in Downtown Toronto (Thursday mandatory, remaining 2 days flexible) / 2 days remote Role Type: Permanent, Full-Time Compensation: Up to $120,000 – $130,000 CAD Base