Principal Cloud Platform Engineer

Salem Five is a growing regional financial services organization with a rich history of over 170 years. As an independent bank, we are deeply rooted in the communities we serve and offer our employees successful and rewarding careers.

This position requires the ability to work in the Salem, MA office.

Salem Five has more than 30 retail banking branches throughout Essex, Middlesex, Norfolk and Suffolk counties, strong business banking capabilities, an Insurance division, a Wealth Management & Trust organization and a Mortgage Company that has provided homeownership to generations of families.

Salem Five believes deeply in supporting the communities in which we reside. Donations through our Charitable Foundation or events at the branch or location-level are an important part of our DNA. We would not be the company we are without our commitment to businesses and organizations that help the region thrive and to our employees. Come see what we’re all about.

JOB DUTIES AND RESPONSIBILITIES include, but are not limited to the following:

• Serve as senior hands-on engineer and escalation point for complex cloud, infrastructure, and production issues.
• Design, implement, and operate Azure platform services including compute, storage, networking, identity, security, and shared services.
• Develop reusable platform standards and automation using Infrastructure as Code, configuration management, scripting, APIs, and CI/CD.
• Provide technical ownership for Entra ID, Active Directory, Windows Server, DNS, Group Policy, certificates/PKI, Microsoft 365 integration, Azure Virtual Desktop, Key Vault, and SQL platform services.
• Lead enterprise backup, recovery, retention, disaster recovery, and cyber-resilience engineering and testing.
• Manage lifecycle, availability, capacity, performance, patching, security, and technical currency of cloud and on-premises platforms.
• Evaluate emerging cloud, automation, AI, and platform-engineering capabilities based on security, maturity, cost, value, and supportability.
• Collaborate with IT leadership, business partners, technology teams, and vendors; support budgeting, licensing, capacity planning, vendor management, cloud cost optimization, ITSM, and regulatory compliance.

Education/Required Skills & Experience

• Bachelor's degree in Computer Science, Information Systems, Engineering, or a related field and/or 8+ years related experience and training; or equivalent combination of education and experience.
• 8+ years of progressively responsible experience in systems, cloud, infrastructure, or platform engineering, including 5+ years hands-on with Microsoft Azure.
• Deep knowledge of Azure and Microsoft infrastructure including Entra ID, Active Directory, Windows Server, DNS, Group Policy, certificates, Microsoft 365 integration, networking, storage, compute, Key Vault, and identity concepts.
• Strong PowerShell, scripting, API, and automation experience.
• Hands-on Infrastructure as Code experience with Terraform and/or Bicep/ARM, source control, and peer-reviewed deployment practices.
• Experience with Chef, Puppet, Ansible, or comparable configuration-management tooling; Chef/Puppet preferred.
• Experience with Azure DevOps, GitHub Actions, or comparable CI/CD automation.
• Strong knowledge of Windows/Linux, virtualization, enterprise storage, containers, backup/recovery, disaster recovery, and cyber resilience; Rubrik strongly preferred.
• Strong troubleshooting, documentation, communication, organizational, and problem-solving skills, with ability to balance reliability, security, cost, technical debt, and business needs.

Preferred Experience

• Rubrik administration including retention policy design, Cloud Vault/archive, SQL-aware protection, recovery testing, and cyber recovery.
• VMware vSphere and enterprise compute/storage; familiarity with Hyper-V, Azure Local, or other virtualization alternatives.
• Azure Virtual Desktop, SQL PaaS, containers/Kubernetes, application delivery, web applications, APIs, and hybrid networking.
• MuleSoft/API management; NinjaOne/Intune; or AWS/GCP exposure.
• Banking, financial services, or another regulated industry; familiarity with ITIL and SRE/platform-engineering practices.
• This business area will continue to evolve, therefore, prior management experience will be helpful and strongly considered.

Certificates, Licenses Registrations

Relevant Microsoft Azure certification preferred. Additional cloud, security, automation/DevOps, ITSM, or infrastructure certifications are beneficial.

Benefits/Incentives:

We offer a comprehensive benefits package designed to support your well‑being and success, including medical, dental, and vision coverage; Flexible Spending and Health Savings Accounts; 401(k) matching; and tuition reimbursement. You will also enjoy additional perks such as our employee referral program, annual holiday reception, summer family outing, and more.

Salary Range: $158,796.00 to $269,952.00

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, and performance. This range may be modified in the future.

PHYSICAL DEMANDS

The physical demands described here are representative of those, which must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. While performing the duties of this job, the employee is regularly required to use hands to finger, handle, or feel; reach with hands and arms; and talk or hear. The employee is occasionally required to stand; walk; sit; climb; or balance; and stoop, kneel, crouch, or crawl. The employee must occasionally lift and/or move up to 50 pounds. Specific vision abilities required by this job include close vision.

Ready to apply? If this job sounds like a fit for you, then click on Apply/Apply Now in this posting. We look forward to talking with you.

No unsolicited resumes accepted from agencies.