Summary:
The Senior Platform/DevOps Engineer — Data Platform is responsible for designing, building, securing, and operating the Azure cloud infrastructure and automation that supports Regent Bank's Snowflake data warehouse environment. A central responsibility is the reliable ingestion of overnight batch extract files from the core banking platform and ancillary banking systems into the Azure/Snowflake environment for analytics and reporting. The role emphasizes Infrastructure as Code, CI/CD, batch load orchestration and reliability, security-by-design with strong protection of customer nonpublic personal information (NPI), and Snowflake performance and cost optimization — all within a regulated community bank environment.
Essential Duties and Responsibilities:
Azure Infrastructure & Platform Engineering
- Own and operate the Azure foundation supporting the data platform, including resource organization, networking and private connectivity to Snowflake, cloud-native identity and RBAC, storage, secrets management, monitoring, and security controls.
- Engineer and maintain Azure storage services for the ingestion and persistence layers (Blob Storage/ADLS Gen2), ensuring proper access controls, lifecycle policies, encryption, and operational reliability.
- Design, implement, and maintain Infrastructure as Code (IaC) for repeatable Dev/Test/Prod environments using standard tooling (e.g., Terraform and/or Bicep) and Git-based workflows.
- Build and manage CI/CD pipelines for infrastructure and data platform changes — including automated testing, approvals, and promotion across environments — aligned to the Bank's ITIL-based change management process.
Data Ingestion & Pipeline Operations
- Engineer and operate the ingestion of overnight batch extract files from the core banking platform and ancillary banking systems (e.g., loan origination, digital
banking, card, general ledger, BSA/AML) into the Azure/Snowflake environment — including secure file transfer and landing, load orchestration and scheduling, completeness and timeliness validation, reconciliation to source, and remediation of late or failed file deliveries within the nightly processing window.
Snowflake Platform Administration & Performance
- Administer and engineer Snowflake platform components (accounts/environments, warehouses, roles, grants, integrations, resource monitors) in alignment with least-privilege and operational best practices.
- Implement and maintain data protection controls for customer nonpublic personal information (NPI) within Snowflake, including data classification, dynamic data masking, column-level security, and row access policies.
- Develop and optimize Snowflake SQL for reliability and performance, including query tuning, warehouse sizing/scaling strategies, and workload management; lead cost-optimization initiatives by analyzing query and load patterns, reducing compute waste, and implementing guardrails (resource monitors, showback) for sustainable platform usage.
Observability, Resilience & Regulatory Support
- Implement observability and operational readiness centered on the overnight load cycle: monitoring, alerting, logging, runbooks, incident and problem management, and root-cause analysis for platform and load issues.
- Support regulatory examinations and internal/external audits by producing evidence of access controls, encryption, change management, and data lineage (e.g., for regulatory examinations and audit requests).
- Maintain disaster-recovery and business-continuity readiness for the data platform consistent with defined RTO/RPO objectives and business continuity expectations.
Collaboration & Documentation
- Partner with data/BI, information security, and compliance stakeholders to ensure platform capabilities meet business needs while maintaining security, compliance, and resiliency expectations.
- Maintain high-quality technical documentation (architecture, configurations, standards, runbooks, and operational procedures).
- Provide technical guidance and knowledge transfer to IT peers on DevOps practices, cloud engineering standards, and platform operational discipline.
- Other duties as assigned.
Education And/Or Experience:
Bachelor's degree in Computer Science, Information Technology, Engineering, or related field (or equivalent practical experience).
Minimum of seven (7) years of experience in platform engineering, DevOps, cloud infrastructure, or SRE-related roles, with demonstrated senior-level ownership.
Minimum of three (3) years of hands-on experience supporting Snowflake in production (including Snowflake SQL development and performance optimization), or equivalent enterprise data warehouse experience with demonstrated ability to ramp quickly on Snowflake.
Demonstrated experience designing and operating Azure infrastructure and storage services in production environments.
Experience with batch/file-based data ingestion, scheduling, and reconciliation — preferably sourced from a core or system-of-record environment (financial services preferred).
Knowledge/Skills/Abilities:
- Advanced knowledge of Azure core services and concepts: cloud-native identity and RBAC, subscriptions/resource groups, networking, private connectivity patterns, storage, secrets and key management, and monitoring.
- Strong proficiency with Azure storage (Blob Storage/ADLS Gen2), including secure access patterns, lifecycle management, and operational troubleshooting.
- Strong proficiency with Snowflake SQL and platform performance optimization (query profiling/tuning, warehouse sizing and scaling, workload management, cost governance), plus Snowflake data-protection features (masking, row access policies).
- Proficiency with batch file ingestion patterns: secure file transfer, load orchestration and scheduling, and load validation and reconciliation to source.
- Strong knowledge of CI/CD systems and GitOps practices for infrastructure and platform changes.
- Proficiency with Infrastructure as Code tooling (e.g., Terraform and/or Bicep) and automation/scripting (PowerShell, Bash, Python, etc.).
- Experience implementing operational controls: logging/monitoring/alerting, runbooks, incident and problem management, and post-incident improvement.
- Strong security mindset: least privilege, secrets management, auditability, protection of customer NPI, and secure-by-default infrastructure.
- Working awareness of the banking regulatory context as it applies to data handling and IT controls.
- Excellent verbal and written communication skills; ability to translate technical risk and design into clear business impact.
- Strong organizational skills, attention to detail, and ability to work under pressure of deadlines.
- All candidates must complete a pre-employment background check, credit check, and drug screening.
Preferred Skills/Certifications:
- Microsoft Azure certifications (e.g., AZ-104, AZ-305) and/or Snowflake certifications (e.g., SnowPro).
- Experience with Jack Henry or comparable core banking systems and their extract/batch file structures.
- Experience supporting a BI/analytics consumption layer (e.g., Power BI) on top of a cloud data warehouse.
- Experience with containerization and cloud-native patterns (e.g., Docker, AKS) where applicable to platform tooling.
- Experience in regulated or high-security environments (financial services a plus).
- Experience with data platform operational governance (resource monitoring, chargeback/showback, access reviews, and platform standards).
Physical Requirements:
- Must exert up to 10 pounds of force occasionally and/or a negligible amount of force frequently.
- Sitting for long periods.
- Specific vision abilities required by this job include close vision and the ability to adjust focus.
Working Conditions:
The working conditions are generally comfortable, with minimal exposure to noise, heat, dust, and other related items. All employees are required to maintain a neat and safe work area.
Regent Bank is an Equal Opportunity Employer. We do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetic information, veteran status, or any other characteristic protected by law.
