Senior DevOps / Platform Engineer — Cloud

Senior DevOps / Platform Engineer — Cloud

Location: Ottawa/Toronto, On-Site

Reports to: Head of Security

THE ROLE

You own the cloud platform and delivery pipeline end to end. That means the CI/CD that takes a developer's commit and produces signed, reproducible artifacts — including the hardened edge images that ship to the field — the telemetry ingestion and fleet-state backend the edge syncs to, and the infrastructure underneath it all: IaC, orchestration, secrets, observability, identity. The constraint that runs through everything: sovereign and reproducible, not click-ops. No silent dependencies on foreign-controlled infrastructure; Protected B as the working baseline, with a credible path to higher.

WHAT YOU'LL DO

- Stand up and run the cloud platform: IaC, orchestration (Kubernetes or equivalent), networking, secrets, identity.

- Build and maintain CI/CD for both cloud services and edge artifact delivery.

- Own the sovereign hosting story: residency, classification baseline, and the architecture that keeps us defensibly Canadian.

- Build supply-chain integrity in — signing, provenance, reproducible builds — alongside Security (you'll work directly with our Head of Security).

- Run the telemetry ingestion and fleet-state backend that the edge syncs to.

- Build the internal developer platform so prototyping is fast and the path to production is paved, not improvised.

 

FIRST 6–12 MONTHS

- Infrastructure as code, top to bottom — no snowflake servers, no manual provisioning, no "the one person who knows how prod works."

- A sovereign hosting posture that holds up to scrutiny: Canadian data residency, Protected B as the working baseline, a credible path to higher. No silent dependencies on foreign-controlled infrastructure.

- A CI/CD pipeline with supply-chain integrity built in: signed builds, verified provenance (SLSA-style), no unsigned artifact reaches edge or cloud.

- A clean build-and-handoff seam to the edge team — the p...