Your OpportunityBDO Digital is looking for a replacement
Senior Cloud Engineer to join our team. This is enterprise-scale platform solutioning, not single-application DevOps. You will build a platform or self-service system that hundreds of applications and many different teams can consume.
The individual will own the following responsibilities:
- Design, build, and maintain enterprise cloud infrastructure and CI/CD pipelines using Terraform and GitHub Actions.
- Build reusable, self-service platform capabilities that can be consumed by hundreds of applications and multiple engineering teams-not point solutions for a single team.
- Own the full lifecycle of cloud services, including observability, security vulnerability management, and RBAC (role-based access control).
- Participate in full SDLC activities, including requirements gathering and enterprise architecture discussions with client stakeholders.
- Maintain thorough documentation, planning artifacts, and detailed ticket updates to provide client visibility.
- Operate within enterprise governance, security, and change-management frameworks as a platform contributor, helping shape and scale cloud capabilities across the organization.
How do we define success for your role? - You demonstrate BDO's core values through all aspects of your work: Integrity, Respect and Collaboration
- You understand your client's industry, challenges, and opportunities; clients describe you as positive, professional, and delivering high-quality work
- You identify, recommend, and are focused on effective service delivery to your clients
- You share in an inclusive and engaging work environment that develops, retains and attracts talent
- You actively participate in the adoption of digital tools and strategies to drive an innovative workplace
- You grow your expertise through learning and professional development.
Your experience and education- True enterprise-scale delivery experience: shared, self-service platforms consumed by many independent application teams, not single-application deployments
- Enterprise governance and landing-zone experience: multi-subscription/multi-account structuring, policy-as-code, and consistent tagging/naming standards enforced at scale
- Identity and access management at scale: Azure AD/Entra ID, RBAC and least-privilege design, service principal / managed identity governance
- Enterprise network architecture: hub-spoke topology, VNet peering, private endpoints, network segmentation
- Security posture and compliance for regulated industries: vulnerability management, threat modeling, audit readiness, and comfort with the change-control standards banks impose on vendors
- Observability at scale: centralized logging, monitoring, and alerting (Azure Monitor/Log Analytics or equivalent), operating to SLA/SLO expectations
- Cost governance / FinOps awareness across many consuming teams
- Comfortable operating within formal change-management/ITSM processes (CAB approvals, detailed ticketing discipline)
- Resilience and disaster-recovery planning - designing for high availability, since platform outages affect many downstream teams
- Architecture-level thinking for platform-level (vs. service-level) engagements - the client considers this non-negotiable at platform scale
- Full SDLC fluency, including requirement gathering and enterprise architecture discussions with client stakeholders
- Strong written communication: detailed documentation, planning in Excel, and thorough ticket-level updates - enterprise clients expect constant visibility into status
- Able to explain technical approach and reasoning in depth; this work is reviewed closely by the client's own in-house architects
- Kubernetes / containerization expertise at depth (needed for at least one of the team's hires)
- Formal cloud platform experience beyond working knowledge (Azure, GCP, or AWS), e.g., Infrastructure-as-Code / Terraform exposure
Must have experience:- Terraform - hands-on Infrastructure-as-Code experience (top priority)
- GitHub / GitHub Actions - CI/CD pipeline design and management
- Microsoft Azure as primary cloud platform; GCP or AWS experience is a plus but not required
- Python, used alongside Terraform for automation and scripting where IaC alone isn't sufficient
- YAML for CI/CD pipeline configuration
- SQL / PostgreSQL and Azure App Service (service-level cloud skills)
- Kubernetes / containerization working knowledge
Nice-to-Have:- Prior banking or financial-services experience
The expected range of compensation for this role is $84,000 - $128,000 annually.
Flexibility: All BDO personnel are expected to spend some of their time working in the office, at the client site, and virtually unless accommodations or alternative work arrangements are in place.
Our model is a blended approach designed to support the flexible needs of our people, the firm and our clients. It's about creating work experiences that meet everyone's needs and providing flexibility to adjust when, where and how we work to meet the expectations of our role.
