Platform Engineer, Cloud AI Infrastructure, Sr

Summary

The Senior Platform Engineer, Cloud & AI Infrastructure designs, builds, automates, and operates the secure cloud platforms that enable OnPoint’s AI, data, analytics, and automation capabilities in Azure and M365. This is a senior, hands-on engineering role responsible for translating complex requirements into reliable, reusable, and production-ready platform services.

The position provides technical leadership for assigned Azure and AI infrastructure capabilities, including architecture, infrastructure automation, identity and networking integration, observability, resiliency, and cost optimization. It establishes engineering patterns that help teams move from experimentation to production without compromising security, supportability, or enterprise standards.

Working with Technology Operations, Architecture, Information Security, Data, Solution Engineering, and the Innovation Center of Excellence, this role resolves complex platform challenges, mentors engineers, and enables approved self-service capabilities. The position leads through technical expertise and cross-team influence rather than people management.

Primary outcomes, first 12 months

• Establish reusable, automated deployment patterns for priority cloud, AI, and data workloads.
• Reduce provisioning lead time and manual configuration through infrastructure as code and standardized platform services.
• Act as the Microsoft ecosystem (365, Azure, etc.) evangelist of new and existing capabilities – the first to be informed, the first to use, the first to teach others to use, and always with energy and commitment to ensuring this platform’s return on investment.
• Implement production-readiness standards covering security, monitoring, support ownership, recovery, and cost.
• Improve reliability and operational visibility through service health measures, actionable alerts, and tested recovery procedures.
• Establish platform cost and capacity baselines and deliver prioritized optimization improvements.
• Enable safe experimentation and repeatable promotion into production through approved environments and controls.

Key responsibilities

Cloud architecture and platform engineering

• Independently lead the design and implementation of complex Azure infrastructure spanning compute, storage, networking, identity, security, and shared platform services.
• Develop and maintain reference architectures, reusable deployment patterns, and documented technical decisions aligned with enterprise architecture standards.
• Translate business and workload requirements into designs that balance reliability, security, performance, cost, and operational complexity.
• Identify platform dependencies and constraints, recommend improvements, and contribute to platform roadmaps and lifecycle planning.

Infrastructure automation and delivery

• Engineer version-controlled infrastructure using Terraform and/or Bicep, supported by PowerShell, Azure CLI, or Python.
• Utilize Microsoft 365 and other platforms to automate corporate functions for IT Operations and advise on how other teams can do the same.
• Build and maintain CI/CD pipelines with automated validation, controlled promotion, secure configuration, and recovery or rollback procedures.
• Establish reusable modules and approved self-service provisioning patterns that reduce manual work and configuration drift.
• Apply code review, testing, documentation, and change-management practices to infrastructure engineering.

AI and data platform enablement

• Engineer the infrastructure foundations for AI services, agent workloads, Databricks, and related enterprise data and automation platforms.
• Implement secure connectivity, workload identities, secrets management, environment separation, capacity controls, and platform telemetry.
• Partner with application, AI, and data engineers to establish scalable deployment and operational patterns for inference, retrieval, and agent workloads.
• Support infrastructure dependencies and integrations for Microsoft 365, Copilot, and Power Platform in partnership with their platform owners.
• Clearly define infrastructure ownership, application responsibilities, and support boundaries before production release.

Security, governance, and operational resilience

• Implement approved identity, access, networking, encryption, policy, and monitoring controls in partnership with Information Security.
• Define and monitor service-level indicators and objectives for assigned platform services.
• Maintain operational runbooks, configuration evidence, recovery-test results, and technical documentation supporting audit and operational readiness.

Technical leadership and collaboration

• Lead technical delivery for complex platform initiatives and coordinate dependencies across teams.
• Mentor engineers through design reviews, code reviews, troubleshooting, and knowledge sharing.
• Explain technical options, risks, and trade-offs clearly to technical and nontechnical stakeholders.
• Evaluate emerging capabilities and recommend adoption based on business value, security, maintainability, and total cost – particularly but not limited to the Microsoft ecosystem.

Required qualifications

• Bachelor’s degree in computer science, information technology, engineering, or a related field, or equivalent professional experience.
• Seven or more years of progressively responsible infrastructure, systems, cloud, or platform engineering experience, including substantial hands-on Azure engineering experience.
• Demonstrated ability to independently design, implement, and operate complex production cloud solutions.
• Advanced knowledge of Azure networking, private connectivity, DNS, identity, role-based access, managed identities, secrets management, and cloud governance.
• Demonstrated experience building reusable infrastructure as code and automated deployment pipelines using Git-based engineering practices.
• Strong scripting and automation capability using PowerShell, Python, and/or Azure CLI.
• Experience implementing observability, performance tuning, capacity management, high availability, and tested disaster recovery.
• Hands-on experience supporting production AI or data platform infrastructure, with the ability to explain its security, connectivity, scaling, and operational requirements.
• Demonstrated ability to troubleshoot complex, cross-platform issues and lead corrective action.
• Experience leading technical implementations, mentoring engineers, and communicating architectural trade-offs.

Certifications

Required

• An active Microsoft Certified: Azure Solutions Architect Expert certification, or the ability to obtain it within 12 months of hire, supported by demonstrated equivalent architecture and engineering experience.

Preferred

• Microsoft Certified: DevOps Engineer Expert, particularly for candidates with strong infrastructure automation and delivery-pipeline responsibilities.

Preferred qualifications

• Experience with Azure-hosted AI services, agent infrastructure, retrieval architectures, and secure model-service connectivity.
• Experience with Databricks infrastructure, workspace deployment, private networking, identity integration, and platform monitoring.
• Experience with Microsoft Entra ID, Azure Policy, Azure Monitor, Log Analytics, Key Vault, and Microsoft Defender for Cloud.
• Experience supporting Microsoft 365, Copilot, or Power Platform integrations and environment governance.
• Experience in financial services or another regulated enterprise environment.
• Experience developing shared platform services, self-service engineering capabilities, and cloud cost-management practices.

At OnPoint, we believe a workplace that reflects the richness of the world fosters a welcoming and empowering environment for everyone. We're committed to equity and inclusion, and consider all qualified applicants embracing every race, religion, color, sex, national origin, age, sexual orientation, gender identity, disability or veteran status, and your unique background.

We encourage you to apply if you're passionate about this opportunity and have the core qualifications. Your unique experiences and skills are what make you a strong candidate. Don’t let imposter syndrome hold you back! Our recruitment process is designed to be inclusive and accessible to all. If you need any accommodations during the application or interview stage, please let us know. We're dedicated to providing what's necessary to ensure a fair and inclusive experience.