Senior DevOps / Platform Engineer

📋 Job Overview

Senior DevOps / Platform Engineer — Cloud
Location: Ottawa/Toronto, On-Site
Reports to: Head of Security

🏢 About Dominion Dynamics

Building something meaningful starts with the right people.
At Dominion Dynamics, you’ll:
Shape Canada’s future by building real defence capability for the CAF and our allies.
Make decisions that ship in a high-trust environment with short feedback loops and rapid iteration.
Move fast, field faster, and work directly with the operator — our systems are in the field with the CAF now.
Have an impact from day one with equity, responsibility, and direct access to leadership.

🎯 The Role

This is a senior platform role — you own the cloud infrastructure and delivery pipeline everything at Dominion runs on. That's the CI/CD that ships signed, reproducible builds (including the hardened images that go to edge devices in the field), the backend that ingests fleet telemetry, and the infrastructure underneath it. What makes it hard is the constraint: it all has to be sovereign and reproducible. Canadian data residency, Protected B from day one, and no hidden dependencies on foreign-controlled infrastructure — a platform anyone can stand up the same way every time, not one that only one person knows how to run.

✅ Key Responsibilities

• Stand up and run the cloud platform as code, top to bottom — IaC, orchestration (Kubernetes or equivalent), networking, secrets, identity. No snowflake servers, no manual provisioning.
• Build and maintain CI/CD for cloud services and edge artifact delivery, with supply-chain integrity built in: signed builds, verified provenance (SLSA-style), reproducible builds — no unsigned artifact reaches edge or cloud. You'll work directly with our Head of Security here.
• Own the sovereign hosting posture: data residency, classification baseline, and an architecture that stays defensibly Canadian under scrutiny.
• Run the telemetry ingestion and fleet-state backend, built for intermittent, bursty, bandwidth-constrained DDIL sync — not steady-state cloud assumptions.
• Define a clean build-and-handoff seam to the edge team: you produce the hardened edge images, they own the device baseline, and the boundary is documented and automated, not tribal.
• Shape the internal developer platform so prototyping is fast and the path to production is paved, not improvised.

📌 Required Qualifications

• Senior/Staff-level depth running production cloud infrastructure — owned a platform, not just shipped to one.
• Strong IaC (Terraform or equivalent) and container orchestration (Kubernetes or comparable) in production.
• Real CI/CD ownership — pipelines designed, secured, and maintained, not just configured.
• Supply-chain security instincts: signing, provenance, reproducible builds, secrets done right.

⭐ Desirable Experience

• Experience with sovereign / data-residency-constrained or air-gapped/regulated environments — Canadian public sector, Protected B, or equivalent.
• Defence or regulated-industry background.
• Familiarity with the realities of DDIL telemetry — ingesting from fleets that aren't always connected.
• Hands-on with self-hosted or Canadian sovereign cloud (vs. hyperscaler-default) infrastructure.

🎁 Benefits

Competitive base salary and company equity*
Comprehensive health benefits
Additional equity granted based on impact*

🛂 Visa & Eligibility

Canadian public sector, Protected B, or equivalent.
Defence or regulated-industry background.