Senior DevOps / Platform Engineer — Cloud

Dominion Dynamics•Ottawa, ON

2d•Onsite

About The Position

You own the cloud platform and delivery pipeline end to end. That means the CI/CD that takes a developer's commit and produces signed, reproducible artifacts — including the hardened edge images that ship to the field — the telemetry ingestion and fleet-state backend the edge syncs to, and the infrastructure underneath it all: IaC, orchestration, secrets, observability, identity. The constraint that runs through everything: sovereign and reproducible, not click-ops. No silent dependencies on foreign-controlled infrastructure; Protected B as the working baseline, with a credible path to higher.

Requirements

Senior/Staff-level depth running production cloud infrastructure — owned a platform, not just shipped to one.
Strong IaC (Terraform or equivalent) and container orchestration (Kubernetes or comparable) in anger.
Real CI/CD ownership — pipelines designed, secured, and maintained, not just configured.
Supply-chain security instincts: signing, provenance, reproducible builds, secrets done right.
Comfort owning a foundational function and imposing order — would rather build the platform than inherit one.

Nice To Haves

Experience with sovereign / data-residency-constrained or air-gapped/regulated environments — Canadian public sector, Protected B, or equivalent.
Defence or regulated-industry background.
Familiarity with the realities of DDIL telemetry — ingesting from fleets that aren't always connected.
Hands-on with self-hosted or Canadian sovereign cloud (vs. hyperscaler-default) infrastructure.
No defence background required.

Responsibilities

Stand up and run the cloud platform: IaC, orchestration (Kubernetes or equivalent), networking, secrets, identity.
Build and maintain CI/CD for both cloud services and edge artifact delivery.
Own the sovereign hosting story: residency, classification baseline, and the architecture that keeps us defensibly Canadian.
Build supply-chain integrity in — signing, provenance, reproducible builds — alongside Security (you'll work directly with our Head of Security).
Run the telemetry ingestion and fleet-state backend that the edge syncs to.
Build the internal developer platform so prototyping is fast and the path to production is paved, not improvised.