Senior Could Engineer

Description

About Bankwell:

Bankwell is a commercial bank with more than $3 billion in assets that serves the banking needs of businesses and individuals. At Bankwell, we pride ourselves on our unique ability to bring you high touch, high quality banking with the expertise and dedication of our experienced team of professionals. When it comes to business, our deep industry knowledge, flexibility and innovative treasury and financing services enable us to find the right solutions for our business and commercial clients. We are passionate about giving back and are actively involved with many not-for-profit organizations that help shape and improve the lives of others. We are dedicated to giving our time and talent to support the communities we serve. More about Bankwell can be found at www.mybankwell.com.

Summary of Position:

The Senior Cloud Engineer is responsible for designing, implementing, securing, automating, and operating Bankwell cloud and enterprise infrastructure, with a primary emphasis on Microsoft Azure and infrastructure as code using Terraform. This senior-level role will help build and mature the Azure foundation required to support strategic modernization efforts, including AI workloads, Snowflake data platform integration, secure connectivity, identity, monitoring, compliance, and disaster recovery. The ideal candidate has deep Azure engineering experience, strong Terraform and automation skills, and the judgment to design secure, repeatable, well-documented cloud patterns in a regulated banking environment.

Responsibilities include:

Cloud Architecture, Azure Platform Engineering & Operations

• Design, implement, and operate secure, scalable Azure infrastructure, including subscriptions, resource groups, networking, identity integrations, storage, compute, monitoring, and platform services.
• Develop and maintain Azure landing zone patterns, configuration standards, naming conventions, tagging standards, and resource governance practices.
• Support Azure platform services required for AI, analytics, data engineering, Snowflake connectivity, and enterprise application modernization.
• Manage and optimize Azure, Microsoft 365, Entra ID, and on-premises integrations to ensure reliability, performance, availability, and secure access.
• Contribute to business continuity and disaster recovery planning for cloud-hosted and hybrid services.

Terraform, Infrastructure as Code & Automation

• Lead the development, maintenance, and governance of Terraform modules, workspaces, state management, reusable design patterns, and infrastructure deployment standards.
• Build repeatable, version-controlled provisioning pipelines using Terraform, Azure DevOps, GitHub, Git, PowerShell, Python, Azure CLI, and related automation tools.
• Implement peer review, change control, testing, and documentation practices for infrastructure as code changes.
• Automate routine cloud operations, configuration drift detection, tagging compliance, access reviews, monitoring, and operational reporting where practical.

Security, Compliance & Governance

• Implement and maintain cloud security controls aligned with least privilege, zero trust principles, secure configuration baselines, and Bankwell policy requirements.
• Partner with Information Security, Risk, Audit, and Compliance teams to support regulatory expectations, evidence requests, control validation, and audit readiness.
• Support Microsoft Purview, data loss prevention, records management, retention, and governance controls where they intersect with cloud and Microsoft 365 platforms.
• Design and maintain secure identity, access, RBAC, privileged access, key management, logging, alerting, and monitoring practices across Azure and related platforms.

Data Platform, AI & Snowflake Enablement

• Engineer the cloud infrastructure patterns, connectivity, identity, security groups, service principals, secrets management, and monitoring needed to support Snowflake and related data platform services.
• Support the secure deployment and operation of Azure services used for AI, automation, data movement, integration, and analytics workloads.
• Collaborate with data architecture, data engineering, information security, and vendor teams to ensure platform decisions are secure, supportable, well-documented, and aligned with Bankwell governance expectations.
• Maintain clear separation of responsibilities by owning cloud platform reliability and security while partnering with data teams that own data models, reporting logic, dashboards, and business analytics.

Operational Leadership, Support & Documentation

• Serve as a senior escalation point for cloud, identity, infrastructure, Microsoft 365, automation, and platform reliability issues.
• Create and maintain architecture diagrams, standards, runbooks, operational procedures, configuration records, and support documentation.
• Mentor team members on Azure, Terraform, automation, secure cloud operations, and disciplined change management practices.
• Coordinate with vendors, consultants, and internal teams to troubleshoot issues, validate technical designs, and move strategic technology initiatives forward.

Requirements

Qualifications & Skills:

• Bachelor’s degree in Information Technology, Computer Science, Engineering, or related field, or equivalent professional experience.
• 7+ years of experience in systems engineering, cloud engineering, infrastructure engineering, or a similar technology role, including senior-level ownership of cloud design and operations.
• 4+ years of hands-on Microsoft Azure engineering experience, including Azure networking, identity, monitoring, security, governance, and platform operations.
• 3+ years of hands-on Terraform experience, including reusable modules, state management, code review practices, version control, and deployment pipelines.
• Strong experience with Azure DevOps, GitHub, Git, PowerShell, Python, Azure CLI, CI/CD practices, and automation-first operational support.
• Experience using GitHub for source control, pull requests, code review workflows, repository standards, and GitHub Actions or comparable CI/CD automation is strongly preferred.
• Strong understanding of Entra ID, RBAC, privileged access, conditional access concepts, secure configuration baselines, logging, alerting, and cloud security controls.
• Experience supporting cloud infrastructure for enterprise data platforms, Snowflake, data integration services, AI workloads, or analytics environments is strongly preferred.
• Working knowledge of NIST, CIS, FFIEC, GLBA, SOC, or banking-related control expectations is preferred.
• Ability to translate technical decisions into clear documentation, executive-ready explanations, standards, diagrams, and supportable operational procedures.
• Strong communication, ownership, vendor coordination, troubleshooting, and cross-functional collaboration skills.

Preferred Certifications:

• HashiCorp Certified: Terraform Associate or equivalent hands-on Terraform experience.
• Microsoft Certified: Azure Administrator Associate, Azure Solutions Architect Expert, Azure Security Engineer Associate, or equivalent Azure engineering experience.
• Security, cloud, or governance certifications such as CISSP, CCSP, CISM, or similar credentials are a plus.

FLSA Status: Exempt

Competitive compensation and benefits, including:

• Medical, dental, and vision coverage
• Employer-paid life and disability insurance
• HSA option
• Employee Assistance Program (EAP)
• Telehealth and wellness resources
• Supplemental insurance options
• Pet insurance and legal plan benefits

Benefits become effective on the first day of the month following date of hire.

This job description is a general description of essential job functions. It is not intended as an employment contract, nor is it intended to describe all duties someone in this position may perform. All employees are expected to perform tasks assigned by supervisory personnel, regardless of job titles or routine job duties.

Bankwell is committed to a policy of Equal Employment Opportunity and will not discriminate against any applicant or employee on the basis of race, color, religion, sex, sexual orientation, national origin or ancestry, age, physical or mental disability, veteran or military status, marital status, or any other legally recognized protected basis under federal, state or local laws.

Applicants with disabilities may be entitled to reasonable accommodation under the terms of Americans with Disability Act and certain other state or local laws. Please inform Bankwell’s Human Resources representative if you need assistance completing any forms or to otherwise participate in the application process.

All employees are responsible for complying with banking regulations that apply to Bankwell. This includes, but is not limited to, adhering to the BSA and various consumer protection regulations, and complying with OFAC sanctions. Employees are required to complete compliance training and follow policies and procedures for applicable regulations based on their role. An employee’s failure to comply with banking regulations will be individually reviewed and assessed. The result of non-compliance may impact job performance ratings and may be serious enough to require termination of employment.