Senior Could Engineer

Bankwell Financial Group • New Canaan, CT

23d

About The Position

The Senior Cloud Engineer designs, implements, secures, automates, and operates Bankwell’s cloud and enterprise infrastructure, primarily using Microsoft Azure and Terraform. The role builds and matures the Azure foundation for modernization initiatives, including AI workloads, Snowflake integration, secure connectivity, identity, monitoring, compliance, and disaster recovery. The engineer establishes secure, repeatable, well-documented cloud patterns in a regulated banking environment.

The position owns cloud platform reliability and security while collaborating with data, security, risk, audit, compliance, vendor, and internal teams. It serves as a senior escalation point, documents architecture and operations, and mentors colleagues in Azure, Terraform, automation, secure cloud operations, and change management. The role also requires employees to comply with applicable banking regulations and complete relevant compliance training.

Requirements

• Bachelor’s degree in Information Technology, Computer Science, Engineering, or a related field, or equivalent professional experience.
• At least 7 years of experience in systems engineering, cloud engineering, infrastructure engineering, or a similar technology role, including senior-level ownership of cloud design and operations.
• At least 4 years of hands-on Microsoft Azure engineering experience, including Azure networking, identity, monitoring, security, governance, and platform operations.
• At least 3 years of hands-on Terraform experience, including reusable modules, state management, code review practices, version control, and deployment pipelines.
• Strong experience with Azure DevOps, GitHub, Git, PowerShell, Python, Azure CLI, CI/CD practices, and automation-first operational support.
• Strong understanding of Entra ID, RBAC, privileged access, conditional access concepts, secure configuration baselines, logging, alerting, and cloud security controls.
• Ability to translate technical decisions into clear documentation, executive-ready explanations, standards, diagrams, and supportable operational procedures.
• Strong communication, ownership, vendor coordination, troubleshooting, and cross-functional collaboration skills.

Nice To Haves

• Experience using GitHub for source control, pull requests, code review workflows, repository standards, and GitHub Actions or comparable CI/CD automation.
• Experience supporting cloud infrastructure for enterprise data platforms, Snowflake, data integration services, AI workloads, or analytics environments.
• Working knowledge of NIST, CIS, FFIEC, GLBA, SOC, or banking-related control expectations.
• HashiCorp Certified: Terraform Associate certification, or equivalent hands-on Terraform experience.
• Microsoft Certified: Azure Administrator Associate, Azure Solutions Architect Expert, Azure Security Engineer Associate, or equivalent Azure engineering experience.
• Security, cloud, or governance certifications such as CISSP, CCSP, CISM, or similar credentials.

Responsibilities

• Design, implement, and operate secure, scalable Azure infrastructure, including subscriptions, resource groups, networking, identity integrations, storage, compute, monitoring, and platform services.
• Develop and maintain Azure landing zone patterns, configuration and naming standards, tagging standards, and resource governance practices.
• Support Azure platform services for AI, analytics, data engineering, Snowflake connectivity, and enterprise application modernization.
• Manage and optimize Azure, Microsoft 365, Entra ID, and on-premises integrations for reliability, performance, availability, and secure access.
• Contribute to business continuity and disaster recovery planning for cloud-hosted and hybrid services.
• Lead development, maintenance, and governance of Terraform modules, workspaces, state management, reusable patterns, and infrastructure deployment standards.
• Build repeatable, version-controlled infrastructure provisioning pipelines using Terraform, Azure DevOps, GitHub, Git, PowerShell, Python, Azure CLI, and related tools.
• Implement peer review, change control, testing, and documentation practices for infrastructure-as-code changes.
• Automate routine cloud operations, configuration drift detection, tagging compliance, access reviews, monitoring, and operational reporting where practical.
• Implement and maintain cloud security controls aligned with least privilege, zero trust principles, secure configuration baselines, and Bankwell policies.
• Partner with Information Security, Risk, Audit, and Compliance teams on regulatory expectations, evidence requests, control validation, and audit readiness.
• Support Microsoft Purview, data loss prevention, records management, retention, and governance controls involving cloud and Microsoft 365 platforms.
• Design and maintain secure identity, access, RBAC, privileged access, key management, logging, alerting, and monitoring practices.
• Engineer infrastructure patterns, connectivity, identity, security groups, service principals, secrets management, and monitoring for Snowflake and related data platform services.
• Support secure deployment and operation of Azure services for AI, automation, data movement, integration, and analytics workloads.
• Collaborate with data architecture, data engineering, information security, and vendors to ensure platform decisions are secure, supportable, documented, and aligned with Bankwell governance.
• Own cloud platform reliability and security while partnering with data teams responsible for data models, reporting logic, dashboards, and business analytics.
• Serve as a senior escalation point for cloud, identity, infrastructure, Microsoft 365, automation, and platform reliability issues.
• Create and maintain architecture diagrams, standards, runbooks, operational procedures, configuration records, and support documentation.
• Mentor team members in Azure, Terraform, automation, secure cloud operations, and disciplined change management.
• Coordinate with vendors, consultants, and internal teams to troubleshoot issues, validate technical designs, and advance strategic technology initiatives.
• Comply with applicable banking regulations, including BSA, consumer protection regulations, and OFAC sanctions, and complete required compliance training.

Benefits

• Medical, dental, and vision coverage.
• Employer-paid life and disability insurance.
• HSA option.
• Employee Assistance Program (EAP).
• Telehealth and wellness resources.
• Supplemental insurance options.
• Pet insurance and legal plan benefits.
• Benefits become effective on the first day of the month following the date of hire.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior