Join our Enterprise Technology Services team!

Be part of  the Cloud Engineering team that strives for excellence, where your efforts will directly contribute to our success. Your work will have an important impact, and you’ll be empowered to make decisions that improve our strategies and customer experience.

The Platform Engineer is responsible for designing, implementing, and maintaining secure access controls across Azure environments using Azure Role-Based Access Control (RBAC). This role ensures that users, applications, and services have the appropriate permissions required to operate while maintaining strict alignment. The engineer will work closely with cloud architects, operations teams, and security partners to deliver scalable, auditable, and compliant access governance.

Position Responsibilities: 

• Design, configure, and manage Azure RBAC to control access across management groups, subscriptions, resource groups, and individual resources.

• Work with security principals (users, groups, service principals, managed identities) to ensure correct and secure access assignments.

• Create, maintain, and optimize role definitions, including built‑in and custom roles tailored to operational requirements.

• Resolve access issues using Azure IAM tools, activity logs, and resource provider permission mappings.

• Partner with engineering and application teams to integrate Managed Identities.

• Support data-plane and control-plane access strategies for services such as compute, storage, networking, and databases.

• Conduct periodic access reviews, identify risks, and implement remediation plans in collaboration with governance teams.

• Contribute to automation and Infrastructure-as-Code (IaaC) processes (ARM, Bicep, Terraform) for consistent RBAC deployment and audit-ability.

• Document RBAC patterns, playbooks, standard processes, and architectural guidance for internal engineering teams.

Required Qualifications: 

• Understanding of server infrastructure, virtualization and cloud computing.

• Solid understanding of Azure environment and Azure Resource Manager (ARM).  

• In-depth knowledge of cloud platforms and networking principle.

• Knowledge of Microsoft Azure Infrastructure as a Code (IaaC).

• Technical knowledge of infrastructure components.

• Experience automating infrastructure provisioning, developer operations, and/or continuous integration/delivery.

• Understanding of security controls for the public Cloud

Preferred Qualifications: 

• Experience with Cloud computing.

• Automation and Infrastructure as Code.

• Networking and Security.

• Identity and Access Management.

• Cloud-based architecture, API Gateways.

• Last 2+ years of professional experience in production environment with a similar role.

• BA/BS degree in Computer Science or related field, or equivalent experience.

When you join our team:

We’ll empower you to learn and grow the career you want.

We’ll recognize and support you in a flexible environment where well-being and inclusion are more than just words.

As part of our global team, we’ll support you in shaping the future you want to see.

The role being advertised is an existing vacancy.

About Manulife and John Hancock

Manulife Financial Corporation is a leading international financial services provider, helping people make their decisions easier and lives better. To learn more about us, visit https://www.manulife.com/en/about/our-story.html.

Manulife is an Equal Opportunity Employer

At Manulife/John Hancock, we embrace our diversity. We strive to attract, develop and retain a workforce that is as diverse as the customers we serve and to foster an inclusive work environment that embraces the strength of cultures and individuals. We are committed to fair recruitment, retention, advancement and compensation, and we administer all of our practices and programs without discrimination on the basis of race, ancestry, place of origin, colour, ethnic origin, citizenship, religion or religious beliefs, creed, sex (including pregnancy and pregnancy-related conditions), sexual orientation, genetic characteristics, veteran status, gender identity, gender expression, age, marital status, family status, disability, or any other ground protected by applicable law.

It is our priority to remove barriers to provide equal access to employment. A Human Resources representative will work with applicants who request a reasonable accommodation during the application process. All information shared during the accommodation request process will be stored and used in a manner that is consistent with applicable laws and Manulife/John Hancock policies. To request a reasonable accommodation in the application process, contact hr@manulife.com.

Referenced Salary Location

Salary range is expected to be between

Employees also have the opportunity to participate in incentive programs and earn incentive compensation tied to business and individual performance. The actual salary will vary depending on local market conditions, geography and relevant job-related factors such as knowledge, skills, qualifications, experience, and education/training. If you are applying for this role outside of the primary location, please contact hr@manulife.com for the salary range for your location.

Manulife offers eligible employees a wide array of customizable benefits, including health, dental, mental health, vision, short- and long-term disability, life and AD&D insurance coverage, adoption/surrogacy and wellness benefits, and employee/family assistance plans. We also offer eligible employees various retirement savings plans (including pension and a global share ownership plan with employer matching contributions) and financial education and counseling resources. Our generous paid time off program in Canada includes holidays, vacation, personal, and sick days, and we offer the full range of statutory leaves of absence. If you are applying for this role in the U.S., please contact hr@manulife.com for more information about U.S.-specific paid time off provisions.

We use data and analytics technologies, such as artificial intelligence (AI), and automated processing tools, to analyze and process the information you provide to us or third parties in the application process. For more information, please refer to our personal information collection statement.