Senior Platform Engineer, AI & Fabrics

bmo; Toronto; Hybrid; CAD 120,000 - 150,000; Full time

Job summary

BMO is hiring senior engineers to design, implement, and operate core platform components for enterprise AI governance. You will work on AI gateway, policy engine, identity fabric, and observability across cloud environments, ensuring compliance with regulatory standards.

The role emphasizes hands-on development, on-call responsibility, and collaboration with cross-functional teams to deliver scalable, secure platform capabilities.

Qualifications

• Experience building/operating production services.
• Hands-on ops: deployments, monitoring, incident response.
• Regulated industry experience is a plus.

Responsibilities

• Own and deliver components within your squad's capability.
• Contribute to design discussions and mentor juniors.
• Write clean, well-tested code with strong operability.
• Ensure runtime evidence links AI activity to policy enforcement.

Skills

Python

Go

API design

Observability

Policy-as-code

Security

Education

Bachelor's degree in CS/SE

Master's degree (asset)

Tools

Kubernetes

AWS

Azure

OpenTelemetry

Job description

Application Deadline: 12/30/2026

Address: 100 King Street West

Job Family Group: Technology

Hybrid Work Model

BMO is building the platform capabilities that make enterprise AI safe, governed, and scalable. We are seeking experienced Senior Engineers to help build and operate the core infrastructure that governs how AI runs at BMO: the AI Gateway, Policy Engine, Identity Fabric, AI Registry, Guardrails Runtime, and AI Observability.

This is a build-and-run engineering role. You will design, implement, and operate significant components of these platform capabilities; writing production code, building integrations, and helping run what you. You will not build the AI models or applications themselves (those are domain-owned); you help build the governed platform they run on and the runtime evidence that proves they run within policy, across AWS, Azure, and Microsoft AI surfaces, under OSFI and OCC expectations.

You are a hands-on engineer with a strong production track record who takes ownership of your components, cares about operability and correctness, and collaborates well within your team. You work within technical direction and standards set by the team's Principal Engineers and Leads, contribute to design discussions, and mentor more junior engineers. You are energized by hardening and scaling real engineering assets; an existing developer portal, an AI registry, a body of policy-as-code, and gateway integrations into enterprise-grade capabilities.

What You'll Build & Operate

Working within one of the platform squads, you will build and operate components of one or more of the following:

Enterprise AI Control Plane

• Portal & Registry: features of the AI Registry (agents, models, tools, channels, evaluations), self-service onboarding flows, and lifecycle workflows; integrations with external registries.
• Policy Engine: components of the policy-as-code infrastructure (Cedar/OPA), the compilation pipeline, GitOps-based distribution, and the policy simulation sandbox.
• Observability & Audit: telemetry pipeline components, OpenTelemetry GenAI instrumentation, trace correlation, and audit-lake ingestion supporting regulator-ready evidence.
• Governance & Lifecycle: certification workflow components, compliance-scoring automation, and evidence-generation tooling.

AI Domain Orchestration

• Gateway Runtime: components of the inline enforcement engine: request-time policy evaluation, routing, residency, budget/quota, and circuit breaking, built to strict latency budgets; domain-hub deployment across AWS and Azure.
• Guardrails Runtime: stages of the safety pipeline (input moderation, prompt-injection defense, PII, output validation, hallucination detection, policy enforcement), including bilingual EN/FR support.
• Identity Fabric: components of workload identity for AI (SPIFFE/SPIRE), token-exchange flows, trust-boundary configuration, Entra Agent ID integration, and cross-cloud token federation.

Note on scope: Two of these platforms (Identity Fabric, Policy Engine) are built with AI as the incubation context but are designed to transition to bank-wide ownership at maturity.

What You'll Do

Own and deliver components/features within your squad's capability, design (with guidance), implement, test, ship, and help operate in production.

Participate in on-call for the services your team runs.

Build APIs, MCP Servers, integrations, and tooling through which domains, DevOps pipelines, and enterprise systems consume platform capabilities.

Write clean, well-tested, well-instrumented code; build operability in from the start (metrics, tracing, SLO-aware design).

Ensure your components produce the runtime evidence connecting AI activity to policy enforcement, identity, and lineage for model-risk and regulatory review.

Contribute to design discussions and technical decisions, applying standards and patterns set by Principal Engineers and Leads.

Mentor junior engineers and collaborate actively across the squad.

Partner day-to-day with AI Developer Experience, AI Security, and AI SDLC counterparts as needed to deliver your work.

Education & Experience

Bachelor's degree in Computer Science, Software Engineering, or a related technical discipline (Master's an asset).

5+ years of software/platform engineering experience, including hands-on experience building and operating production services.

Experience with production operations (deployments, monitoring, incident response, on-call), ideally in a regulated industry (financial services an asset).

Hands-on depth in at least one of: API/gateway services; policy-as-code/authorization; workload identity/security; observability/telemetry; audit/data platforms.

Required Core Skills

Platform Engineering Foundations

Solid software-engineering fundamentals: clean, tested, maintainable code; API design; and an understanding of distributed-systems concepts (latency, resilience, availability).

Strong programming skills (Python and/or Go preferred; TypeScript/Java an asset) for