Senior Could Engineer

Bankwell Financial Group•New Canaan, CT

24d

About The Position

The Senior Cloud Engineer is responsible for designing, implementing, securing, automating, and operating Bankwell’s cloud and enterprise infrastructure, primarily using Microsoft Azure and Terraform. This senior-level role helps build and mature the Azure foundation for modernization initiatives, including AI workloads, Snowflake integration, secure connectivity, identity, monitoring, compliance, and disaster recovery. The position calls for deep Azure engineering experience, strong Terraform and automation skills, and the ability to design secure, repeatable, well-documented cloud patterns in a regulated banking environment. The engineer develops and operates Azure infrastructure and landing-zone standards; leads infrastructure-as-code practices and deployment automation; implements security, compliance, and governance controls; and enables secure infrastructure for data, AI, analytics, and Snowflake platforms. The role also provides senior technical escalation, documentation, mentoring, and coordination with internal teams, vendors, and consultants. Employees must comply with applicable banking regulations and complete required compliance training.

Requirements

Bachelor’s degree in Information Technology, Computer Science, Engineering, or a related field, or equivalent professional experience.
At least 7 years of experience in systems engineering, cloud engineering, infrastructure engineering, or a similar technology role, including senior-level ownership of cloud design and operations.
At least 4 years of hands-on Microsoft Azure engineering experience, including Azure networking, identity, monitoring, security, governance, and platform operations.
At least 3 years of hands-on Terraform experience, including reusable modules, state management, code review practices, version control, and deployment pipelines.
Strong experience with Azure DevOps, GitHub, Git, PowerShell, Python, Azure CLI, CI/CD practices, and automation-first operational support.
Strong understanding of Entra ID, RBAC, privileged access, conditional access concepts, secure configuration baselines, logging, alerting, and cloud security controls.
Ability to translate technical decisions into clear documentation, executive-ready explanations, standards, diagrams, and supportable operational procedures.
Strong communication, ownership, vendor coordination, troubleshooting, and cross-functional collaboration skills.
Employees must comply with applicable banking regulations, including BSA, consumer protection regulations, and OFAC sanctions, and follow relevant policies and procedures.

Nice To Haves

Experience with GitHub source control, pull requests, code review workflows, repository standards, and GitHub Actions or comparable CI/CD automation.
Experience supporting cloud infrastructure for enterprise data platforms, Snowflake, data integration services, AI workloads, or analytics environments.
Working knowledge of NIST, CIS, FFIEC, GLBA, SOC, or banking-related control expectations.
HashiCorp Certified: Terraform Associate certification, or equivalent hands-on Terraform experience.
Microsoft Certified: Azure Administrator Associate, Azure Solutions Architect Expert, or Azure Security Engineer Associate certification, or equivalent Azure engineering experience.
Security, cloud, or governance certifications such as CISSP, CCSP, CISM, or similar credentials.

Responsibilities

Design, implement, and operate secure, scalable Azure infrastructure, including subscriptions, resource groups, networking, identity integrations, storage, compute, monitoring, and platform services.
Develop and maintain Azure landing-zone patterns, configuration and naming standards, tagging standards, and resource governance practices.
Support Azure platform services for AI, analytics, data engineering, Snowflake connectivity, and enterprise application modernization.
Manage and optimize Azure, Microsoft 365, Entra ID, and on-premises integrations for reliability, performance, availability, and secure access.
Contribute to business continuity and disaster recovery planning for cloud-hosted and hybrid services.
Lead development, maintenance, and governance of Terraform modules, workspaces, state management, reusable patterns, and infrastructure deployment standards.
Build repeatable, version-controlled provisioning pipelines using Terraform, Azure DevOps, GitHub, Git, PowerShell, Python, Azure CLI, and related tools.
Implement peer review, change control, testing, and documentation practices for infrastructure-as-code changes.
Automate cloud operations, configuration drift detection, tagging compliance, access reviews, monitoring, and operational reporting where practical.
Implement and maintain cloud security controls aligned with least privilege, zero trust principles, secure configuration baselines, and Bankwell policies.
Partner with Information Security, Risk, Audit, and Compliance teams on regulatory expectations, evidence requests, control validation, and audit readiness.
Support Microsoft Purview, data loss prevention, records management, retention, and governance controls related to cloud and Microsoft 365 platforms.
Design and maintain secure identity, access, RBAC, privileged access, key management, logging, alerting, and monitoring practices.
Engineer cloud infrastructure patterns, connectivity, identity, security groups, service principals, secrets management, and monitoring for Snowflake and related data platforms.
Support secure deployment and operation of Azure services for AI, automation, data movement, integration, and analytics workloads.
Collaborate with data architecture, data engineering, information security, and vendors to ensure platform decisions are secure, supportable, documented, and aligned with governance expectations.
Own cloud platform reliability and security while partnering with data teams responsible for data models, reporting logic, dashboards, and business analytics.
Serve as a senior escalation point for cloud, identity, infrastructure, Microsoft 365, automation, and platform reliability issues.
Create and maintain architecture diagrams, standards, runbooks, operational procedures, configuration records, and support documentation.
Mentor team members on Azure, Terraform, automation, secure cloud operations, and disciplined change management.
Coordinate with vendors, consultants, and internal teams to troubleshoot issues, validate technical designs, and advance strategic technology initiatives.
Comply with applicable banking regulations, including BSA, consumer protection regulations, and OFAC sanctions, and complete required compliance training.