Senior DevOps Engineer (Azure Infrastructure & Platform)

About the Opportunity

We are hiring a Senior DevOps Engineer to join a fast-growing, CDIC-insured, federally regulated Canadian digital bank undergoing an active technology transformation.

Unlike typical DevOps positions focused solely on writing CI/CD pipelines, this is a true Cloud Infrastructure & Platform Engineering role. You will report directly to the Lead Cloud Engineer and take end-to-end ownership of how cloud infrastructure, secure network architecture, and containerized platforms are architected, provisioned, and scaled across Azure (primary) and AWS.

If you are a hands-on engineer who thrives in high-ownership environments, understands deep Azure networking (beyond basic Terraform modules), and wants your work to carry real regulatory weight, this is the role for you.

Why Join This Team?

• Real Scope & Ownership: Work in a tight-knit, high-impact engineering team in Downtown Toronto where your voice matters - no silos or rigid bureaucracy.
• Active Tech Transformation: Build brand-new digital banking and lending infrastructure from the ground up, not just maintaining legacy systems.
• High Career Value: Gain deep, portable experience in a heavily regulated banking environment with continuous investment in modern cloud tooling.
• Competitive Compensation: Base salary up to $140K CAD + 15% target bonus + comprehensive benefits.

Core Responsibilities

• Cloud Infrastructure via IaC: Provision and manage scalable production environments in Azure (and secondary AWS workloads) using modular Terraform as your primary tool.
• End-to-End Azure Network Architecture: Design and optimize secure Hub-and-Spoke VNets, subnets, NSGs, Azure Firewalls, Application Gateways (WAF), Front Door, Private Endpoints, and Private Link.
• Containerization & Orchestration: Package microservices with Docker and manage container workloads on Kubernetes (AKS).
• SDLC & DevSecOps Integration: Embed security and compliance controls across the entire software development lifecycle, integrating code scanning (Snyk, SonarQube), artifact management (Nexus), and secrets rotation (Vault).
• Automated Pipelines: Build and optimize CI/CD pipelines using GitHub Actions and Azure DevOps.
• Proactive Monitoring & Incident Response: Implement robust logging, alerting, and telemetry using Azure Monitor and CloudWatch to maintain 99.9%+ platform availability.

What We Are Looking For

• 7+ years of hands-on experience in DevOps, Cloud Platform, or Infrastructure Engineering (flexible down to 5–6 years for exceptional Azure depth).
• Deep Azure Networking Expertise: Proven track record designing hub-and-spoke networks, firewall placement, routing tables, and Private Link security controls.
• Strong Infrastructure as Code (IaC): Production experience writing, structuring, and managing state in Terraform.
• Containerization & Kubernetes: Solid hands-on experience with Docker and managed Kubernetes (AKS).
• Scripting Proficiency: Advanced scripting abilities in Bash, PowerShell, or Python.
• Regulated Environment Experience: Familiarity with financial compliance, OSFI, PCI-DSS, or zero-trust security frameworks.
• Collaborative Mindset: A vocal engineer who participates actively in architectural discussions, challenges technical proposals constructively, and thrives in daily standups.

Nice-to-Haves

• Certifications: Azure DevOps Engineer Expert, HashiCorp Terraform Associate, or CKA/CKAD.
• Secondary exposure to AWS infrastructure or database migrations.
• Hands-on experience with Zero Trust / SASE network architectures or Okta integrations.

Work Model & Location: hybrid schedule - 3 days on-site in Downtown Toronto (Thursday mandatory, remaining 2 days flexible) / 2 days remote

Role Type: Permanent, Full-Time

Compensation: Up to $120,000 – $130,000 CAD Base