Senior Artificial Intelligence Platform Engineer, AI Platform & Fabrics

Bank of Montreal; Toronto; Hybrid; CAD 76,000 - 142,000; Full time

Benefits offered by this job

Health insurance

Tuition reimbursement

Retirement savings plans

Life insurance

Job summary

Bank of Montreal is seeking senior software engineers to build and operate enterprise AI platform capabilities. You will design, implement, and run components for AI gateway, policy engine, identity fabric, and observability across AWS/Azure. You’ll own features end-to-end, mentor others, and contribute to production reliability and governance.

You will collaborate with AI security, DX, and SDLC teams while following bank-wide standards and regulatory requirements.

Qualifications

• Bachelor’s degree in CS, Software Eng or related field; Master’s asset.
• 5+ years of software/platform engineering, with production services.
• Hands-on depth in API/gateway, policy-as-code/authorization, workload identity, observability, or data/audit platforms.

Responsibilities

• Own, design, implement, test, and operate production services in your squad.
• Build APIs, MCP servers, integrations, and tooling for platform capabilities.
• Operate in production, participate in on-call, and ensure operability and security.
• Mentor junior engineers and collaborate with AI DX, AI Security, and AI SDLC teams.

Skills

Python

Go

TypeScript

Java

CI/CD

Kubernetes

Education

Bachelor's degree in Computer Science / Software Engineering or related

Master's degree asset

Tools

Terraform

CloudFormation/ARM

GitHub / Bitbucket

Jira / Confluence

OpenTelemetry / Observability tools

Job description

Application Deadline:09/29/2026Address:33 Dundas Street WestJob Family Group:TechnologyHybrid Work ModelBMO is building the platform capabilities that make enterprise AI safe, governed, and scalable. We are seeking experienced Senior Engineers to help build and operate the core infrastructure that governs how AI runs at BMO : the AI Gateway, Policy Engine, Identity Fabric, AI Registry, Guardrails Runtime, and AI Observability.This is a build-and-run engineering role. You will design, implement, and operate significant components of these platform capabilities; writing production code, building integrations, and helping run what you. You will not build the AI models or applications themselves (those are domain-owned); you help build the governed platform they run on and the runtime evidence that proves they run within policy, across AWS, Azure, and Microsoft AI surfaces, under OSFI and OCC expectations.You are a hands-on engineer with a strong production track record who takes ownership of your components, cares about operability and correctness, and collaborates well within your team. You work within technical direction and standards set by the team's Principal Engineers and Leads, contribute to design discussions, and mentor more junior engineers. You are energized by hardening and scaling real engineering assets; an existing developer portal, an AI registry, a body of policy-as-code, and gateway integrations into enterprise-grade capabilities.What You'll Build & OperateWorking within one of the platform squads, you will build and operate components of one or more of the following:Enterprise AI Control PlanePortal & Registry: features of the AI Registry (agents, models, tools, channels, evaluations), self-service onboarding flows, and lifecycle workflows; integrations with external registries.Policy Engine : components of the policy-as-code infrastructure (Cedar/OPA), the compilation pipeline, GitOps-based distribution, and the policy simulation sandbox.Observability & Audit : telemetry pipeline components, OpenTelemetry GenAI instrumentation, trace correlation, and audit-lake ingestion supporting regulator-ready evidence.Governance & Lifecycle : certification workflow components, compliance-scoring automation, and evidence-generation tooling.AI Domain OrchestrationGateway Runtime : components of the inline enforcement engine: request-time policy evaluation, routing, residency, budget/quota, and circuit breaking, built to strict latency budgets; domain-hub deployment across AWS and Azure.Guardrails Runtime : stages of the safety pipeline (input moderation, prompt-injection defense, PII, output validation, hallucination detection, policy enforcement), including bilingual EN/FR support.Identity Fabric : components of workload identity for AI (SPIFFE/SPIRE), token-exchange flows, trust-boundary configuration, Entra Agent ID integration, and cross-cloud token federation.Note on scope: Two of these platforms (Identity Fabric, Policy Engine) are built with AI as the incubation context but are designed to transition to bank-wide ownership at maturity.What You'll DoOwn and deliver components/features within your squad's capability, design (with guidance), implement, test, ship, and help operate in production.Participate in on-call for the services your team runs.Build APIs, MCP Servers, integrations, and tooling through which domains, DevOps pipelines, and enterprise systems consume platform capabilities.Write clean, well-tested, well-instrumented code; build operability in from the start (metrics, tracing, SLO-aware design).Ensure your components produce the runtime evidence connecting AI activity to policy enforcement, identity, and lineage for model-risk and regulatory review.Contribute to design discussions and technical decisions , applying standards and patterns set by Principal Engineers and Leads.Mentor junior engineers and collaborate actively across the squad.Partner day-to-day with AI Developer Experience , AI Security , and AI SDLC counterparts as needed to deliver your work.Education & ExperienceBachelor's degree in Computer Science, Software Engineering, or a related technical discipline (Master's an asset).5+ years of software/platform engineering experience, including hands-on experience building and operating production services .Experience with production operations (deployments, monitoring, incident response, on-call), ideally in a regulated industry (financial services an asset).Hands-on depth in at least one of: API/gateway services; policy-as-code/authorization; workload identity/security; observability/telemetry; audit/data platforms.Required Core SkillsPlatform Engineering FoundationsSolid software-engineering fundamentals: clean, tested, maintainable code; API design; and an understanding of distributed-systems concepts (latency, resilience, availability).Strong programming skills (Python and/or Go preferred; TypeScript/Java an asset) for building services, APIs, and integrations.Working proficiency in cloud-native development on AWS and/or Azure : containers/Kubernetes and Infrastructure as Code (Terraform, CloudFormation/ARM).Practical CI/CD, GitOps, and DevSecOps experience; Git-based workflows (Bitbucket/GitHub), Jira, Confluence.Capability-Specific Depth (one or more)Policy/Authorization: Cedar, OPA/Rego, or comparable authorization systems.Identity/Security: SPIFFE/SPIRE, mTLS, OAuth/OIDC, token exchange, or federated identity.Observability/Audit: OpenTelemetry, distributed tracing, Dynatrace/Splunk or equivalents, immutable/audit data stores.Gateway/Guardrails: API gateway usage/development, LLM routing/abstraction, prompt-injection/PII defenses, or AI evaluation.Registry/Portal: service catalogues, asset registries, lifecycle/onboarding workflows.GenAI & Governance ContextWorking knowledge of GenAI platform patterns (LLM/AI gateways, RAG, agentic patterns, embeddings, guardrails) sufficient to build supporting infrastructure.Familiarity with AI/ML tooling (Bedrock, Azure OpenAI, SageMaker, MLflow) and orchestration frameworks (LangChain, LlamaIndex) an asset.Awareness of Responsible AI, AI/data governance, privacy, cloud security, and IAM as applied to AI workloads.Certifications (Preferred)AWS Certified Solutions Architect – Associate (Professional an asset) / ML – SpecialtyMicrosoft Certified: Azure AI Engineer Associate / Azure Solutions Architect ExpertSalary :$75,900.00 - $141,900.00Pay Type:SalariedThe above represents BMO Financial Group’s pay range and type.Salaries will vary based on factors such as location, skills, experience, education, and qualifications for the role, and may include a commission structure. Salaries for part-time roles will be pro-rated based on number of hours regularly worked. For commission roles, the salary listed above represents BMO Financial Group’s expected target for the first year in this position.BMO Financial Group’s total compensation package will vary based on the pay type of the position and may include performance-based incentives, discretionary bonuses, as well as other perks and rewards. BMO also offers health insurance, tuition reimbursement, accident and life insurance, and retirement savings plans. To view more details of our benefits, please visit: https://jobs.bmo.com/global/en/Total-RewardsAbout UsAt BMO we are driven by a shared Purpose: Boldly Grow the Good in business and life. It calls on us to create lasting, positive change for our customers, our communities and our people. By working together, innovating and pushing boundaries, we transform lives and businesses, and power economic growth around the world.As a member of the BMO team you are valued, respected and heard, and you have more ways to grow and make an impact. We strive to help you make an impact from day one – for yourself and our customers. We’ll support you with the tools and resources you need to reach new milestones, as you help our customers reach theirs. From in-depth training and coaching, to manager support and network-building opportunities, we’ll help you gain valuable experience, and broaden your skillset.To find out more visit us at https://jobs.bmo.com/ca/en .BMO is committed to an inclusive, equitable and accessible workplace. By learning from each other’s differences, we gain strength through our people and our perspectives. Accommodations are available on request for candidates taking part in all aspects of the selection process. To request accommodation, please contact your recruiter.Note to Recruiters: BMO does not accept unsolicited resumes from any source other than directly from a candidate. Any unsolicited resumes sent to BMO, directly or indirectly, will be considered BMO property. BMO will not pay a fee for any placement resulting from the receipt of an unsolicited resume. A recruiting agency must first have a valid, written and fully executed agency agreement contract for service to submit resumes.