Senior DevOps / Platform Engineer — Cloud

Location: Ottawa/Toronto, On-Site Reports to: Head of Security The Role This is a senior platform role — you own the cloud infrastructure and delivery pipeline everything at Dominion runs on. That's the CI/CD that ships signed, reproducible builds (including the hardened images that go to edge devices in the field), the backend that ingests fleet telemetry, and the infrastructure underneath it. What makes it hard is the constraint: it all has to be sovereign and reproducible. Canadian data residency, Protected B from day one, and no hidden dependencies on foreign-controlled infrastructure — a platform anyone can stand up the same way every time, not one that only one person knows how to run. What You'll Do Stand up and run the cloud platform as code, top to bottom — IaC, orchestration (Kubernetes or equivalent), networking, secrets, identity. No snowflake servers, no manual provisioning. Build and maintain CI/CD for cloud services and edge artifact delivery, with supply-chain integrity built in: signed builds, verified provenance (SLSA-style), reproducible builds — no unsigned artifact reaches edge or cloud. You'll work directly with our Head of Security here. Own the sovereign hosting posture: data residency, classification baseline, and an architecture that stays defensibly Canadian under scrutiny. Run the telemetry ingestion and fleet-state backend, built for intermittent, bursty, bandwidth-constrained DDIL sync — not steady-state cloud assumptions. Define a clean build-and-handoff seam to the edge team: you produce the hardened edge images, they own the device baseline, and the boundary is documented and automated, not tribal. Shape the internal developer platform so prototyping is fast and the path to production is paved, not improvised. What You Bring Senior/Staff-level depth running production cloud infrastructure — owned a platform, not just shipped to one. Strong IaC (Terraform or equivalent) and container orchestration (Kubernetes or comparable) in production. Real CI/CD ownership — pipelines designed, secured, and maintained, not just configured. Supply-chain security instincts: signing, provenance, reproducible builds, secrets done right. Nice to Have Experience with sovereign / data-residency-constrained or air-gapped/regulated environments — Canadian public sector, Protected B, or equivalent. Defence or regulated-industry background. Familiarity with the realities of DDIL telemetry — ingesting from fleets that aren't always connected. Hands-on with self-hosted or Canadian sovereign cloud (vs. hyperscaler-default) infrastructure. No defence background required. We've hired people who didn't tick every box. If this is the work you want to do, please apply anyway. Why Join Us Building something meaningful starts with the right people. At Dominion Dynamics, you’ll: Shape Canada’s future by building real defence capability for the CAF and our allies. Make decisions that ship in a high-trust environment with short feedback loops and rapid iteration. Move fast, field faster, and work directly with the operator — our systems are in the field with the CAF now. Have an impact from day one with equity, responsibility, and direct access to leadership. If you’re curious, hands-on, and driven by the opportunity to make a difference, this is where you belong! Compensation & Benefits Competitive base salary and company equityComprehensive health benefitsAdditional equity granted based on impact We use AI tools to support parts of the hiring process, including screening and reviewing responses. Final hiring decisions are always made by people and follow all applicable privacy and employment laws in Canada.