Senior Cloud Engineer - Terraform, Azure

BDO Canada; Toronto; On-site; CAD 110,000 - 140,000; Full time

Job summary

BDO Digital in Toronto, Canada seeks a Senior Cloud Engineer to design, build and maintain an enterprise cloud platform and CI/CD pipelines. You will create scalable, self-service capabilities used by many applications and teams, manage full lifecycle of cloud services, and participate in enterprise governance with security and change-management controls.

The role emphasizes observability, cost governance, and architecture discussions with stakeholders, with documentation and ticket updates for

Qualifications

• True enterprise-scale delivery experience with shared, self-service platforms used by many independent app teams.
• Enterprise governance and landing-zone experience with multi-subscription structuring, policy-as-code, and tagging at scale.
• Identity and access management at scale using Azure AD/Entra ID, RBAC and least-privilege design.
• Observability at scale with centralized logging, monitoring, and alerting (Azure Monitor/Log Analytics or equivalent).
• Comfort with formal change-management/ITSM processes (CAB approvals, detailed ticketing discipline).

Responsibilities

• Design, build, and maintain enterprise cloud infrastructure and CI/CD pipelines (Terraform, GitHub Actions).
• Build reusable, self-service platform capabilities for hundreds of applications and teams.
• Own the full lifecycle of cloud services including observability, security vulnerability management, and RBAC.
• Participate in full SDLC activities, including requirements gathering and architecture discussions with stakeholders.
• Maintain thorough documentation, planning artifacts, and detailed ticket updates for client visibility.
• Operate within enterprise governance, security, and change-management frameworks as a platform contributor.

Skills

Enterprise-scale delivery

Governance & landing-zone

Identity management at scale

RBAC & least-privilege

Observability at scale

Cost governance / FinOps

Change-management / ITSM

Disaster recovery planning

Platform architecture thinking

SDLC / enterprise architecture

Tools

Azure Monitor

Log Analytics

VNet peering

Policy-as-code tooling

Job description

Putting people first, every day BDO is a firm built on a foundation of positive relationships with our people and our clients. Each day, our professionals provide exceptional service, helping clients with advice and insight they can trust. In turn, we offer an award‑winning environment that fosters a people‑first culture with a high priority on your personal and professional growth.

Your Opportunity

BDO Digital is looking for a replacement Senior Cloud Engineer to join our team. This is enterprise‑scale platform solutioning, not single‑application DevOps. You will build a platform or self‑service system that hundreds of applications and many different teams can consume.

• Design, build, and maintain enterprise cloud infrastructure and CI/CD pipelines using Terraform and GitHub Actions.
• Build reusable, self-service platform capabilities that can be consumed by hundreds of applications and multiple engineering teams—not point solutions for a single team.
• Own the full lifecycle of cloud services, including observability, security vulnerability management, and RBAC (role-based access control).
• Participate in full SDLC activities, including requirements gathering and enterprise architecture discussions with client stakeholders.
• Maintain thorough documentation, planning artifacts, and detailed ticket updates to provide client visibility.
• Operate within enterprise governance, security, and change‑management frameworks as a platform contributor, helping shape and scale cloud capabilities across the organization.

How do we define success for your role?

• You demonstrate BDO's core values through all aspects of your work: Integrity, Respect and Collaboration
• You understand your client’s industry, challenges, and opportunities; clients describe you as positive, professional, and delivering high-quality work
• You identify, recommend, and are focused on effective service delivery to your clients
• You share in an inclusive and engaging work environment that develops, retains and attracts talent
• You actively participate in the adoption of digital tools and strategies to drive an innovative workplace
• You grow your expertise through learning and professional development.

Your Experience And Education

• True enterprise-scale delivery experience: shared, self-service platforms consumed by many independent application teams, not single-application deployments
• Enterprise governance and landing-zone experience: multi-subscription/multi-account structuring, policy-as-code, and consistent tagging/naming standards enforced at scale
• Identity and access management at scale: Azure AD/Entra ID, RBAC and least-privilege design, service principal / managed identity governance
• Enterprise network architecture: hub-spoke topology, VNet peering, private endpoints, network segmentation
• Security posture and compliance for regulated industries: vulnerability management, threat modeling, audit readiness, and comfort with the change-control standards banks impose on vendors
• Observability at scale: centralized logging, monitoring, and alerting (Azure Monitor/Log Analytics or equivalent), operating to SLA/SLO expectations
• Cost governance / FinOps awareness across many consuming teams
• Comfortable operating within formal change-management/ITSM processes (CAB approvals, detailed ticketing discipline)
• Resilience and disaster-recovery planning — designing for high availability, since platform outages affect many downstream teams
• Architecture-level thinking for platform-level (vs. service-level) engagements — the client considers this non-negotiable at platform scale
• Full SD