Lead, Cloud Engineer

About Northern Trust As a global leader in innovative wealth management, asset servicing, asset management and banking services, Northern Trust (Nasdaq: NTRS) is proud to guide the world’s most successful individuals, families, corporations and institutions. Since 1889, we have aligned our efforts with our three guiding Principles That Endure: Service, Expertise, and Integrity. Together, they reflect the three cornerstones of business conduct which we strive to instill in our employees, whom we call partners, and to provide to our clients and the communities we serve worldwide. With more than 135 years of financial experience and over 24,000 partners, we serve the world’s most sophisticated clients using leading technology and exceptional service. We are seeking a Lead - Cloud Foundation Engineer to design, build, automate, and support secure, scalable cloud foundations and shared platform services. The role will contribute hands-on engineering expertise while leading technical delivery across landing zones, infrastructure automation, governance, networking, observability, and operational readiness. The successful candidate will work closely with application, DevOps, security, network, and operations teams to deliver reusable cloud patterns, improve platform reliability, and enable efficient self-service adoption by engineering teams. Key Responsibilities Cloud Platform EngineeringDesign, implement, and maintain enterprise landing zones and shared cloud services. Manage account/subscription structures, tagging, and policy structures across Azure and/or AWS. Develop secure-by-default and reusable infrastructure patterns for application teams. Build and enforce secure-by-default infrastructure patterns. Infrastructure as Code & AutomationDevelop, test, and maintain reusable Infrastructure as Code modules, with Terraform preferred; experience with Bicep or CloudFormation is beneficial.  Build and improve CI/CD pipelines for automated infrastructure deployment, validation, and controlled change.  Enable self-service provisioning through standard templates, automation, documentation, and guardrails.  Use Python, PowerShell, or Bash to automate operational tasks and reduce manual effort. Security, Governance & ComplianceImplement identity and access management controls, role-based access, policy enforcement, and least-privilege practices. Configure and maintain cloud guardrails, policies, monitoring controls, and security baselines. Ensure compliance with regulatory and internal security standards. Networking & ConnectivityImplement and support VPC/VNet architectures, subnets, routing, DNS, private endpoints, firewalls, load balancers, VPNs, and hybrid connectivity. Contribute to resilient and scalable connectivity designs for shared and application platforms.  Establish hybrid connectivity solutions with on-premises environments.