Senior Platform Engineer - Terraform, Azure

bdo; Toronto; On-site; CAD 84,000 - 128,000; Full time

Job summary

BDO Digital is seeking a Senior Platform Engineer to design, build, and maintain enterprise cloud platforms and CI/CD pipelines using Terraform and GitHub Actions. You will create self-service capabilities used by hundreds of applications and teams.

You will own the full lifecycle of cloud services, including observability, security, RBAC, and governance, collaborating with client stakeholders to scale capabilities across the organization.

Qualifications

• Terraform - hands-on Infrastructure-as-Code experience.
• GitHub / GitHub Actions - CI/CD pipeline design and management.
• Microsoft Azure as primary cloud platform; GCP or AWS experience is a plus.
• Python used with Terraform for automation.
• YAML for CI/CD pipeline configuration.
• SQL / PostgreSQL and Azure App Service skills.
• Kubernetes / containerization knowledge.

Responsibilities

• Design, build, and maintain enterprise cloud infrastructure and CI/CD pipelines.
• Build reusable, self-service platform capabilities for hundreds of applications and teams.
• Own the full lifecycle of cloud services, including observability and security vulnerability management.
• Participate in requirements gathering and enterprise architecture discussions with client stakeholders.
• Maintain thorough documentation and planning artifacts with detailed ticket updates for visibility.
• Operate within governance, security, and change-management frameworks as a platform contributor.

Skills

Terraform

GitHub Actions

Azure Cloud

Python

YAML

SQL/PostgreSQL

Kubernetes

Job description

Putting people first, every day

BDO is a firm built on a foundation of positive relationships with our people and our clients. Each day, our professionals provide exceptional service, helping clients with advice and insight they can trust. In turn, we offer an award-winning environment that fosters a people-first culture with a high priority on your personal and professional growth.

Your Opportunity

BDO Digital is looking for a replacement Senior Platform Engineer to join our team. This is enterprise-scale platform solutioning, not single-application DevOps. You will build a platform or self-service system that hundreds of applications and many different teams can consume.

The individual will own the following responsibilities:

• Design, build, and maintain enterprise cloud infrastructure and CI/CD pipelines using Terraform and GitHub Actions.
• Build reusable, self-service platform capabilities that can be consumed by hundreds of applications and multiple engineering teams-not point solutions for a single team.
• Own the full lifecycle of cloud services, including observability, security vulnerability management, and RBAC (role-based access control).
• Participate in full SDLC activities, including requirements gathering and enterprise architecture discussions with client stakeholders.
• Maintain thorough documentation, planning artifacts, and detailed ticket updates to provide client visibility.
• Operate within enterprise governance, security, and change-management frameworks as a platform contributor, helping shape and scale cloud capabilities across the organization.

How do we define success for your role?

You demonstrate BDO's core values through all aspects of your work: Integrity, Respect and Collaboration

You understand your client's industry, challenges, and opportunities; clients describe you as positive, professional, and delivering high-quality work

You identify, recommend, and are focused on effective service delivery to your clients

You share in an inclusive and engaging work environment that develops, retains and attracts talent

You actively participate in the adoption of digital tools and strategies to drive an innovative workplace

You grow your expertise through learning and professional development.

Your experience and education

True enterprise-scale delivery experience: shared, self-service platforms consumed by many independent application teams, not single-application deployments

Enterprise governance and landing-zone experience: multi-subscription/multi-account structuring, policy-as-code, and consistent tagging/naming standards enforced at scale

Identity and access management at scale: Azure AD/Entra ID, RBAC and least-privilege design, service principal / managed identity governance

Enterprise network architecture: hub-spoke topology, VNet peering, private endpoints, network segmentation

Security posture and compliance for regulated industries: vulnerability management, threat modeling, audit readiness, and comfort with the change-control standards banks impose on vendors

Observability at scale: centralized logging, monitoring, and alerting (Azure Monitor/Log Analytics or equivalent), operating to SLA/SLO expectations

Cost governance / FinOps awareness across many consuming teams

Comfortable operating within formal change-management/ITSM processes (CAB approvals, detailed ticketing discipline)

Resilience and disaster-recovery planning - designing for high availability, since platform outages affect many downstream teams

Architecture-level thinking for platform-level (vs. service-level) engagements - the client considers this non-negotiable at platform scale

Full SDLC fluency, including requirement gathering and enterprise architecture discussions with client stakeholders

Strong written communication: detailed documentation, planning in Excel, and thorough ticket-level updates - enterprise clients expect constant visibility into status

Able to explain technical approach and reasoning in depth; this work is reviewed closely by the client's own in-house architects

Kubernetes / containerization expertise at depth (needed for at least one of the team's hires)

Formal cloud platform experience beyond working knowledge (Azure, GCP, or AWS), e.g., Infrastructure-as-Code / Terraform exposure

Must have experience:

• Terraform - hands-on Infrastructure-as-Code experience (top priority)
• GitHub / GitHub Actions - CI/CD pipeline design and management
• Microsoft Azure as primary cloud platform; GCP or AWS experience is a plus but not required
• Python, used alongside Terraform for automation and scripting where IaC alone isn't sufficient
• YAML for CI/CD pipeline configuration
• SQL / PostgreSQL and Azure App Service (service-level cloud skills)
• Kubernetes / containerization working knowledge

Nice-to-Have:

Prior banking or financial-services experience

The expected range of compensation for this role is $84,000 - $128,000 annually.

Why BDO?

Our people-first approach to talent ha