IT Engineer IV - Cloud Platform Solutions

We're building a culture at BOK Financial where amazing people (like you) can bring their best, be their best and work for the best. You've come to the right place to grow your career.

The IT Engineer IV - Cloud Platform Solutions is responsible for building secure, scalable, and automated cloud infrastructure. This role brings a security-first mindset to infrastructure-as-code practices and works across engineering, security, and application teams to implement secure policies, automate cloud governance, and support compliant migrations in Azure and AWS. They will be responsible for working collaboratively with multiple teams to implement highly available and secure cloud technologies. This role is also responsible for continuous monitoring and optimization of the cloud implementation for efficiencies and continuous support of, and collaboration with, other teams and projects, particularly DevOps, platform and automation teams. The person in this role must be a highly collaborative, creative and intellectually curious individual who is passionate about forming and implementing cutting-edge cloud computing capabilities. Extensive engineering experience is required as this role provides tier 3 support for technology teams in the organization.

Ourmission is toempower our company, teammates andcustomers through thedelivery of resilient andcustomer-centric technology. We achieve this by leveraging our expertise in technology and deepunderstandingofour business units.

* You will design and deploy secure and compliant cloud solutions using in AWS and Azure using Terraform, GitLab, and CI/CD pipelines.
* You will design and implement Hashicorp Sentinel policies and policy sets in Terraform Cloud.
* You will develop policy-as-code frameworks (e.g., Azure Policy, AWS SCPs) to enforce governance and compliance.
* You will collaborate with security and application teams to implement secure architectures and mitigate risks.
* You will proactively manage and mitigating the risks associated with cloud environments.
* You will be implementing and validating robust IAM and network policies.
* You will integrate automated testing and security controls into CI/CD workflows (SAST, DAST, code scanning).
* You will contribute to secure cloud migrations, threat modeling, and incident response planning.
* You will design and develop Rego Syntax OPA policy as code to enforce & govern Kubernetes environments.
* You will design and enforce Kubernetes and cloud network security policies to enforce zero-trust security model.
* You will provide Tier 3 support and serve as subject matter expert on cloud platform and automation.
* You will strategize, consult, and prototype alongside other engineers to implement best practices and solutions for applications utilizing CI/CD and cloud.
* You will cultivate a strong knowledge of Identity Management including AWS Managed AD, Azure AD, Azure Resource roles and access reviews
* You will cultivate a strong understanding of Cloud Policies and how to create custom policies.
* You will collaborate with development team members to troubleshoot, and resolve problems that may exist in cloud-hosted environments.
* You will ensure that cybersecurity controls are met or exceeded.
* You will have efficient communication with application stakeholders about application availability & platform updates including any application outages, issues, failures, availability delays etc.
* You will work within established configuration and change management policies to ensure awareness, approval and success of changes made to the infrastructure.

This level of knowledge is normally acquired through the completion of a bachelor's degree in a technology field and/or 4+ years of related experience.

* 4+ years of experience in cloud platform engineering, with a focus on AWS and/or Azure.
* Strong hands-on experience with Terraform, YAML, pipelines, scripting (PowerShell, Bash), and Git.
* Strong understanding of IAM, cloud networking, secrets management, and encryption.
* Familiarity with security tools such as SonarQube, Checkmarx, Wiz and container security scanners.
* Experience with Python development and AI Agent tools such as Amazon Bedrock Agent or Microsoft CoPilot.
* Experience with Kubernetes and container security best practices.
* Ability to work cross-functionally with application, security, and DevOps teams.
* Strong communication, documentation, and troubleshooting skills.