Director AI Platform Engineering

BMO; Chicago (IL); On-site; USD 180,000 - 240,000; Full time

Job summary

BMO is building a dedicated AI Engineering function to deliver platform capabilities that make enterprise AI safe, governed, and scalable across our business domains and regulatory regimes. As Director, Enterprise AI Platform Engineering, you will own the core infrastructure that governs and enforces how AI runs at BMO—AI Gateway, Policy Engine, Identity Fabric, AI Registry, Guardrails Runtime, and AI Observability.

This is a build-and-run leadership role.

Responsibilities

• Own the Enterprise Control Plane including Developer Portal & AI Registry; deliver federated registry with onboarding workflows.
• Lead Policy Engine, Observability, and Governance workflows to enable safe, compliant AI at scale.
• Oversee Domain Orchestration components: Gateway Runtime, Guardrails Runtime, Identity Fabric; ensure latency and security targets.

Job description

Director, Enterprise AI Platform Engineering

BMO is building a dedicated AI Engineering function to deliver the platform capabilities that make enterprise AI safe, governed, and scalable across our business domains and regulatory regimes. We are seeking an experienced technical leader to own the core infrastructure that governs and enforces how AI runs at BMO - the AI Gateway, Policy Engine, Identity Fabric, AI Registry, Guardrails Runtime, and AI Observability.

This is a build-and-run leadership role. You will lead a team that designs, ships, and operates the control and orchestration infrastructure sitting between policy authoring and inline enforcement — the capabilities every AI workload at BMO consumes to be secure, compliant, and observable. You will not own the AI models or applications themselves (those are domain-owned); you own the governed platform they run on , and the runtime evidence that proves they run within policy.

You are a hands-on technical leader who has built platform capabilities at scale, operates what you build, and designs for operability and regulatory defensibility from day one. You blend deep engineering credibility with the executive presence to partner across Security, Architecture, DevOps, and domain teams. You are energized by taking real engineering assets — an existing developer portal, AI registry, a body of policy-as-code, and gateway integrations — and formalizing, scaling, and governing them into an enterprise-grade platform.

What You'll Own

Enterprise Control Plane

• Developer Portal & AI Registry - productionize the developer portal; deliver a federated AI Registry spanning agents, models, tools, channels, and evaluations, with self-service onboarding and lifecycle workflows.

• Policy Engine - policy-as-code infrastructure (Cedar/OPA), a policy compilation and GitOps distribution pipeline, risk-tiered approval workflows, and a policy simulation environment.

• Observability & Audit - a multi-pipeline architecture spanning operational, security, and compliance telemetry; OpenTelemetry GenAI conventions; cross-pipeline trace correlation; and a tamper-evident audit lake producing regulator-ready evidence.

• Governance & Lifecycle - certification workflows, automated compliance scoring, decommission governance, and evidence generation for architecture and model-risk review.

Domain Orchestration

• Gateway Runtime - domain-hub deployment across multiple clouds; an inline enforcement engine with request-time policy evaluation, routing, residency, budget/quota controls, and circuit breakers, operating within strict latency budgets.

• Guardrails Runtime - a multi-stage safety pipeline (input moderation, prompt-injection defense, PII handling, output validation, hallucination detection, policy enforcement) with bilingual (EN/FR) parity and behavioral guardrails for agentic workloads.

• Identity Fabric - workload identity for AI (SPIFFE/SPIRE), token-exchange bridging, per-domain trust boundaries, enterprise identity integration, and cross-cloud token federation with zero-trust attestation.

What You'll Deliver (First 12 Months)

• A production-hardened Developer Portal and federated AI Registry with sub-5-day self-service onboarding.

• An AI Gateway operational in a selected business domain, meeting tiered latency targets.