Principal Java Jobs in Toronto, ON (NOW HIRING)

09/29/2026

Address:

33 Dundas Street WestTechnology

Hybrid Work Model

BMO is building the platform capabilities that make enterprise AI safe, governed, and scalable. We are seeking experienced Senior Engineers to helpbuild and operate the core infrastructure that governs how AI runs at BMO: the AI Gateway, Policy Engine, Identity Fabric, AI Registry, Guardrails Runtime, and AI Observability.

This is abuild-and-runengineering role. You will design, implement, and operate significant components of these platform capabilities; writing production code, building integrations, and helping run what you. You will not build the AI models or applications themselves (those are domain-owned); you help build thegoverned platform they run onand the runtime evidence that proves they run within policy, across AWS, Azure, and Microsoft AI surfaces, under OSFI and OCC expectations.

You are a hands-on engineer with a strong production track record who takes ownership of your components, cares about operability and correctness, and collaborates well within your team. You work within technical direction and standards set by the team's Principal Engineers and Leads, contribute to design discussions, and mentor more junior engineers. You are energized by hardening and scaling real engineering assets; an existing developer portal, an AI registry, a body of policy-as-code, and gateway integrations into enterprise-grade capabilities.

What You'll Build & Operate

Working within one of the platform squads, you will build and operate components of one or more of the following:

Enterprise AI Control Plane

• Portal & Registry: features of the AI Registry (agents, models, tools, channels, evaluations), self-service onboarding flows, and lifecycle workflows; integrations with external registries.
• Policy Engine: components of the policy-as-code infrastructure (Cedar/OPA), the compilation pipeline, GitOps-based distribution, and the policy simulation sandbox.
• Observability & Audit: telemetry pipeline components, OpenTelemetry GenAI instrumentation, trace correlation, and audit-lake ingestion supporting regulator-ready evidence.
• Governance & Lifecycle: certification workflow components, compliance-scoring automation, and evidence-generation tooling.

AI Domain Orchestration

• Gateway Runtime: components of the inline enforcement engine: request-time policy evaluation, routing, residency, budget/quota, and circuit breaking, built to strict latency budgets; domain-hub deployment across AWS and Azure.
• Guardrails Runtime: stages of the safety pipeline (input moderation, prompt-injection defense, PII, output validation, hallucination detection, policy enforcement), including bilingual EN/FR support.
• Identity Fabric: components of workload identity for AI (SPIFFE/SPIRE), token-exchange flows, trust-boundary configuration, Entra Agent ID integration, and cross-cloud token federation.

Note on scope:Two of these platforms (Identity Fabric, Policy Engine) are built with AI as the incubation context but are designed to transition to bank-wide ownership at maturity.

What You'll Do

• Own and deliver components/featureswithin your squad's capability, design (with guidance), implement, test, ship, and help operate in production.
• Participate in on-callfor the services your team runs.
• BuildAPIs, MCP Servers, integrations, and toolingthrough which domains, DevOps pipelines, and enterprise systems consume platform capabilities.
• Write clean, well-tested, well-instrumented code; buildoperability in from the start(metrics, tracing, SLO-aware design).
• Ensure your componentsproduce the runtime evidenceconnecting AI activity to policy enforcement, identity, and lineage for model-risk and regulatory review.
• Contribute to design discussions and technical decisions, applying standards and patterns set by Principal Engineers and Leads.
• Mentor junior engineersand collaborate actively across the squad.
• Partner day-to-day withAI Developer Experience,AI Security, andAI SDLCcounterparts as needed to deliver your work.

Education & Experience

• Bachelor's degree in Computer Science, Software Engineering, or a related technical discipline (Master's an asset).
• 5+ years of software/platform engineering experience, including hands-on experiencebuilding and operating production services.
• Experience withproduction operations(deployments, monitoring, incident response, on-call), ideally in a regulated industry (financial services an asset).
• Hands-on depth in at least one of:API/gateway services; policy-as-code/authorization; workload identity/security; observability/telemetry; audit/data platforms.

Required Core Skills

Platform Engineering Foundations

• Solid software-engineering fundamentals: clean, tested, maintainable code; API design; and an understanding of distributed-systems concepts (latency, resilience, availability).
• Strong programming skills (Python and/or Go preferred; TypeScript/Java an asset) for building services, APIs, and integrations.
• Working proficiency in cloud-native development onAWS and/or Azure: containers/Kubernetes and Infrastructure as Code (Terraform, CloudFormation/ARM).
• Practical CI/CD, GitOps, and DevSecOps experience; Git-based workflows (Bitbucket/GitHub), Jira, Confluence.

Capability-Specific Depth (one or more)

• Policy/Authorization:Cedar, OPA/Rego, or comparable authorization systems.
• Identity/Security:SPIFFE/SPIRE, mTLS, OAuth/OIDC, token exchange, or federated identity.
• Observability/Audit:OpenTelemetry, distributed tracing, Dynatrace/Splunk or equivalents, immutable/audit data stores.
• Gateway/Guardrails:API gateway usage/development, LLM routing/abstraction, prompt-injection/PII defenses, or AI evaluation.
• Registry/Portal:service catalogues, asset registries, lifecycle/onboarding workflows.

GenAI & Governance Context

• Working knowledge of GenAI platform patterns (LLM/AI gateways, RAG, agentic patterns, embeddings, guardrails) sufficient to build supporting infrastructure.
• Familiarity with AI/ML tooling (Bedrock, Azure OpenAI, SageMaker, MLflow) and orchestration frameworks (LangChain, LlamaIndex) an asset.
• Awareness of Responsible AI, AI/data governance, privacy, cloud security, and IAM as applied to AI workloads.

Certifications (Preferred)

• AWS Certified Solutions Architect - Associate (Professional an asset) / ML - Specialty
• Microsoft Certified: Azure AI Engineer Associate / Azure Solutions Architect Expert

$75,900.00 - $141,900.00Salaried

The above represents BMO Financial Group's pay range and type.

Salaries will vary based on factors such as location, skills, experience, education, and qualifications for the role, and may include a commission structure. Salaries for part-time roles will be pro-rated based on number of hours regularly worked. For commission roles, the salary listed above represents BMO Financial Group's expected target for the first year in this position.

BMO Financial Group's total compensation package will vary based on the pay type of the position and may include performance-based incentives, discretionary bonuses, as well as other perks and rewards. BMO also offers health insurance, tuition reimbursement, accident and life insurance, and retirement savings plans. To view more details of our benefits, please visit:https://jobs.bmo.com/global/en/Total-Rewards

About Us

At BMO we are driven by a shared Purpose: Boldly Grow the Good in business and life. It calls on us to create lasting, positive change for our customers, our communities and our people. By working together, innovating and pushing boundaries, we transform lives and businesses, and power economic growth around the world.

As a member of the BMO team you are valued, respected and heard, and you have more ways to grow and make an impact. We strive to help you make an impact from day one - for yourself and our customers. We'll support you with the tools and resources you need to reach new milestones, as you help our customers reach theirs. From in-depth training and coaching, to manager support and network-building opportunities, we'll help you gain valuable experience, and broaden your skillset.

To find out more visit us at https://jobs.bmo.com/ca/en.

BMO is committed to an inclusive, equitable and accessible workplace. By learning from each other's differences, we gain strength through our people and our perspectives. Accommodations are available on request for candidates taking part in all aspects of the selection process. To request accommodation, please contact your recruiter.

Note to Recruiters: BMO does not accept unsolicited resumes from any source other than directly from a candidate. Any unsolicited resumes sent to BMO, directly or indirectly, will be considered BMO property. BMO will not pay a fee for any placement resulting from the receipt of an unsolicited resume. A recruiting agency must first have a valid, written and fully executed agency agreement contract for service to submit resumes.