Principal Cloud Platform Engineer

Make Your Move; United States; On-site; USD 138,000 - 235,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

FSA/HSA

401(k) matching

Tuition reimbursement

Employee referral program

Annual holiday reception

Summer family outing

Job summary

Salem Five is seeking a senior hands-on engineer to lead cloud and infrastructure efforts in the Salem, MA office. You will own Azure platform services, Entra ID, Windows Server, AD, and SQL services while shaping automation, security, and disaster recovery strategies.

The role requires 8+ years in systems and cloud, 5+ years with Azure, and strong scripting/automation capabilities. Collaboration with IT leadership and vendors is essential in a regulated financial services setting.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Engineering, or related field and/or 8+ years related experience and training; or equivalent combination of education and experience.
• 8+ years of progressively responsible experience in systems, cloud, infrastructure, or platform engineering, including 5+ years hands-on with Microsoft Azure.
• Deep knowledge of Azure and Microsoft infrastructure including Entra ID, Active Directory, Windows Server, DNS, Group Policy, certificates, Microsoft 365 integration, networking, storage, compute, Key Vault, and identity concepts.
• Strong PowerShell, scripting, API, and automation experience.
• Hands-on Infrastructure as Code experience with Terraform and/or Bicep/ARM, source control, and peer-reviewed deployment practices.
• Experience with Chef, Puppet, Ansible, or comparable configuration-management tooling; Chef/Puppet preferred.
• Experience with Azure DevOps, GitHub Actions, or comparable CI/CD automation.
• Strong knowledge of Windows/Linux, virtualization, enterprise storage, containers, backup/recovery, disaster recovery, and cyber resilience; Rubrik strongly preferred.
• Strong troubleshooting, documentation, communication, organizational, and problem-solving skills.

Responsibilities

• Serve as senior hands-on engineer and escalation point for complex cloud, infrastructure, and production issues.
• Design, implement, and operate Azure platform services including compute, storage, networking, identity, security, and shared services.
• Develop reusable platform standards and automation using Infrastructure as Code, configuration management, scripting, APIs, and CI/CD.
• Provide technical ownership for Entra ID, Active Directory, Windows Server, DNS, Group Policy, certificates/PKI, Microsoft 365 integration, Azure Virtual Desktop, Key Vault, and SQL platform services.
• Lead enterprise backup, recovery, retention, disaster recovery, and cyber-resilience engineering and testing.
• Manage lifecycle, availability, capacity, performance, patching, security, and technical currency of cloud and on-premises platforms.
• Evaluate emerging cloud, automation, AI, and platform-engineering capabilities based on security, maturity, cost, value, and supportability.
• Collaborate with IT leadership, business partners, technology teams, and vendors; support budgeting, licensing, capacity planning, vendor management, cloud cost optimization, ITSM, and regulatory compliance.

Skills

Azure experience

PowerShell

Automation

Infrastructure as Code

CI/CD

Windows/Linux

Documentation

Communication

Education

Bachelor's degree in CS/IS/Engineering

Tools

Terraform

Bicep/ARM

GitHub Actions

Azure DevOps

Puppet/Chef/Ansible

Job description

Salem Five is a growing regional financial services organization with a rich history of over 170 years. As an independent bank, we are deeply rooted in the communities we serve and offer our employees successful and rewarding careers.

This position requires the ability to work in the Salem, MA office.

Salem Five has more than 30 retail banking branches throughout Essex, Middlesex, Norfolk and Suffolk counties, strong business banking capabilities, an Insurance division, a Wealth Management & Trust organization and a Mortgage Company that has provided homeownership to generations of families.

Salem Five believes deeply in supporting the communities in which we reside. Donations through our Charitable Foundation or events at the branch or location-level are an important part of our DNA. We would not be the company we are without our commitment to businesses and organizations that help the region thrive and to our employees. Come see what we’re all about.

JOB DUTIES AND RESPONSIBILITIES include, but are not limited to the following:

• Serve as senior hands‑on engineer and escalation point for complex cloud, infrastructure, and production issues.
• Design, implement, and operate Azure platform services including compute, storage, networking, identity, security, and shared services.
• Develop reusable platform standards and automation using Infrastructure as Code, configuration management, scripting, APIs, and CI/CD.
• Provide technical ownership for Entra ID, Active Directory, Windows Server, DNS, Group Policy, certificates/PKI, Microsoft 365 integration, Azure Virtual Desktop, Key Vault, and SQL platform services.
• Lead enterprise backup, recovery, retention, disaster recovery, and cyber‑resilience engineering and testing.
• Manage lifecycle, availability, capacity, performance, patching, security, and technical currency of cloud and on‑premises platforms.
• Evaluate emerging cloud, automation, AI, and platform‑engineering capabilities based on security, maturity, cost, value, and supportability.
• Collaborate with IT leadership, business partners, technology teams, and vendors; support budgeting, licensing, capacity planning, vendor management, cloud cost optimization, ITSM, and regulatory compliance.

Education/Required Skills & Experience

• Bachelor's degree in Computer Science, Information Systems, Engineering, or a related field and/or 8+ years related experience and training; or equivalent combination of education and experience.
• 8+ years of progressively responsible experience in systems, cloud, infrastructure, or platform engineering, including 5+ years hands‑on with Microsoft Azure.
• Deep knowledge of Azure and Microsoft infrastructure including Entra ID, Active Directory, Windows Server, DNS, Group Policy, certificates, Microsoft 365 integration, networking, storage, compute, Key Vault, and identity concepts.
• Strong PowerShell, scripting, API, and automation experience.
• Hands‑on Infrastructure as Code experience with Terraform and/or Bicep/ARM, source control, and peer‑reviewed deployment practices.
• Experience with Chef, Puppet, Ansible, or comparable configuration‑management tooling; Chef/Puppet preferred.
• Experience with Azure DevOps, GitHub Actions, or comparable CI/CD automation.
• Strong knowledge of Windows/Linux, virtualization, enterprise storage, containers, backup/recovery, disaster recovery, and cyber resilience; Rubrik strongly preferred.
• Strong troubleshooting, documentation, communication, organizational, and problem‑solving skills, with ability to balance reliability, security, cost, technical debt, and business needs.

Preferred Experience

• Rubrik administration including retention policy design, Cloud Vault/archive, SQL‑aware protection, recovery testing, and cyber recovery.
• VMware vSphere and enterprise compute/storage; familiarity with Hyper‑V, Azure Local, or other virtualization alternatives.
• Azure Virtual Desktop, SQL PaaS, containers/Kubernetes, application delivery, web applications, APIs, and hybrid networking.
• Banking, financial services, or another regulated industry; familiarity with ITIL and SRE/platform‑engineering practices.
• This business area will continue to evolve, therefore, prior management experience will be helpful and strongly considered.

Certificates, Licenses Registrations

Relevant Microsoft Azure certification preferred. Additional cloud, security, automation/DevOps, ITSM, or infrastructure certifications are beneficial.

Benefits/Incentives

$138,082.00 to $234,740.00

We offer a comprehensive benefits package designed to support your well‑being and success, including medical, dental, and vision coverage; Flexible Spending and Health Savings Accounts; 401(k) matching; and tuition reimbursement. You will also enjoy additional perks such as our employee referral program, annual holiday reception, summer family outing, and more.

Salary Range

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, and performance. This range may be modified in the future.

PHYSICAL DEMANDS

The physical demands described here are representative of those, which must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. While performing the duties of this job, the employee is regularly required to use hands to finger, handle, or feel; reach with hands and arms; and talk or hear. The employee is occasionally required to stand; walk; sit; climb; or balance; and stoop, kneel, crouch, or crawl. The employee must occasionally lift and/or move up to 50 pounds. Specific vision abilities required by this job include close vision.

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities
This employer is required to notify all applicants of their rights pursuant to federal employment laws.For further information, please review the Know Your Rights notice from the Department of Labor.