Summary

The Payment Platform DevOps Engineer enables the secure, scalable delivery of the bank’s payment platform SDLC—supporting both traditional software development and emerging AI-driven payment initiatives. This role delivers solutions to support the lifecycle of cloud infrastructure, CI/CD automation, and Power Platform / M365 Copilot Studio agents that power payment operations. The engineer works closely with internal developers, platform engineers, and cloud services engineers. Through Infrastructure as Code, GitHub-native delivery, and disciplined Power Platform ALM, the engineer accelerates innovation while reducing risk and operational cost.

Duties & Responsibilities

• Design, build, and maintain Terraform Infrastructure as Code for Azure payment platform environments (dev, UAT, prod) using reusable modules and policy-as-code guardrails

• Own end-to-end M365 Copilot Studio agent lifecycle—environment strategy, solution packaging, automated promotion, telemetry, and governance for payment-focused agents

• Operate Power Platform ALM (Power Apps, Power Automate, Dataverse) using managed environments, the ALM Accelerator, and pipelines integrated with GitHub Actions

• Build and maintain GitHub-native CI/CD pipelines using Actions, OIDC federation, environments, and reusable workflows for .NET, TypeScript, and IaC repositories

• Implement and harden Azure platform services for payments—AKS, Azure Functions, API Management, Service Bus, and Key Vault—with secure-by-default networking and identity

• Drive observability, reliability, and incident response across payment workloads using Azure Monitor, Application Insights, and OpenTelemetry

• Partner with software, data, and AI engineers to deploy, evaluate, and operate Azure OpenAI and Azure AI Foundry workloads supporting payment initiatives

• Mentor developers on DevOps practices, IaC patterns, and Power Platform / Copilot Studio governance; champion compliance with PCI DSS, change management, and SDLC standards

• It is the responsibility of this role to take ownership of all tasks and challenges that they encounter in the operation of their assigned position.  Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. 

Qualifications

Education Requirements

• Bachelor’s degree in Computer Science, Engineering, or related field; or 5+ years of equivalent experience

Minimum Experience

• 7+ years in DevOps, platform, or cloud engineering, including 3+ years on Microsoft Azure and Infrastructure as Code

Licenses & Certifications

• Microsoft Certified: Azure DevOps Engineer Expert, Azure Solutions Architect Expert, or Power Platform Developer/Solution Architect; HashiCorp Certified Terraform Associate; GitHub Actions or GitHub Advanced Security (one or more preferred)

Knowledge, Skills, & Abilities

• Infrastructure as Code with Terraform — reusable modules, remote state, policy-as-code (Sentinel, OPA, Azure Policy), and Azure Verified Modules

• Microsoft Azure breadth: AKS, Azure Functions, API Management, Service Bus, Event Grid, Azure SQL, Cosmos DB, Key Vault, Front Door, Application Gateway, Azure AI Foundry, and Azure OpenAI

• GitHub platform: Actions (reusable and matrix workflows, OIDC), Advanced Security, Dependabot, Codespaces, GitHub Copilot, and environment policies

• Power Platform ALM at scale: managed environments, solutions, ALM Accelerator, Power Platform CLI, Dataverse, and tenant-wide DLP and governance

• M365 Copilot Studio: agent design, knowledge sources, plugins/connectors, authentication, environment promotion, telemetry, content moderation, and evaluation

• Modern .NET (.NET 10 / C# 13, ASP.NET Core, Minimal APIs)

• Containers and orchestration: AKS, Azure Container Apps

• Observability: Application Insights, Azure Monitor, and log analytics.

• Security and compliance for payments: PCI DSS 4.0, Microsoft Defender for Cloud, Microsoft Sentinel, Microsoft Purview, secrets management, and zero-trust networking

• Payments domain awareness: ISO 20022, real-time rails (RTP, FedNow, Zelle), card networks, and tokenization

• AI engineering for production: Retrieval-Augmented Generation patterns, prompt and agent evaluation, responsible AI guardrails, and content safety

Physical Demands and Work Environment

Physical Demands

• Ability to communicate in person, on the phone, and through electronic channels

• Ability to use a computer on a frequent basis, including typing and sustained attention to a monitor

• Ability to sit, walk, and/or stand for extended periods of time

• Ability to bend and reach

Work Environment

• Office: This position reports to a physical Company location, and the setting will be a typical office environment.

• Remote or hybrid: For remote or hybrid positions, a secure and distraction-free setting is required, with a reliable internet connection (cable or fiber preferred, mobile hotspots not acceptable).  Hybrid positions will report to a physical Company location, as directed by the manager, and that setting will be a typical office environment.