Principal, Cloud Engineering, AWS

General Dynamics Missions System International; Ottawa; On-site; CAD 120,000 - 170,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

Pension plan

Career development

Flexible leave options

Onsite fitness facilities

Employee discounts

Job summary

General Dynamics Mission Systems–Canada is seeking a Principal, Cloud Engineering AWS Manager to own the design, build, and operation of our sovereign AWS Canada estate. Reporting to the CDIO, this role sets standards, writes them in code, and runs the environment to meet security and compliance requirements.

You will lead the transition of landing-zone operations from a managed service provider to an in-house model, act as the AWS authority, mentor the growing team, and enable data, AI, and

Qualifications

• A minimum of 10 years of experience in cloud or infrastructure architecture, with deep expertise designing, building, and operating production AWS environments at scale.
• Expert command of AWS landing-zone design, including AWS Organizations, Control Tower, multi-account architecture, core networking, and security services.
• Strong Infrastructure as Code and automation capability, ideally with Terraform, together with hands-on experience of CI/CD and policy-as-code.
• Proven experience securing and operating cloud within a regulated environment, with a working understanding of the compliance frameworks and change discipline it demands.
• The ability to own outcomes end to end and operate autonomously, and to present platform direction and trade-offs to an executive audience.
• A senior AWS certification, such as Solutions Architect – Professional or DevOps Engineer – Professional, or equivalent demonstrable expertise.
• Demonstrated mentorship capabilities

Responsibilities

• Own the architecture, build, and lifecycle of the sovereign AWS Canada landing zone, including multi-account structure, account vending, and organizational guardrails using AWS Organizations and Control Tower.
• Design and implement core platform networking, including VPC design, Transit Gateway, and Direct Connect connectivity into on-premises and enclave environments.
• Establish platform standards, reference patterns, and the roadmap that balance quality against the constraints of a controlled environment.
• Design and enforce identity, encryption, logging, and monitoring controls, using services such as IAM, KMS, CloudTrail, GuardDuty, and Security Hub.
• Ensure the platform satisfies CMMC 2.0, ITAR and EAR handling obligations, and Controlled Goods Program requirements, and that data residency and sovereignty are preserved by design.
• Integrate the platform with the organization's security tooling and partner closely with the Cybersecurity function on threat detection and response.
• Deliver the environment as code using Terraform or equivalent, and implement policy-as-code, automated provisioning, and drift detection.
• Oversee the build and maintain CI/CD pipelines for platform and workload deployment, reducing manual effort and configuration risk.
• Champion automation as the default operating model for the estate.
• Lead the transition of landing-zone operations from the managed-service provider to an in-house model in line with the defined insourcing trigger.
• Define the operating model, runbooks, and standards required to run the platform sustainably, and manage knowledge transfer from the incumbent provider.
• Manage the technical relationship with AWS and platform vendors, and hold them to standards and value.
• Enable data, AI, and application workloads to land on the platform securely and efficiently, partnering with the data, networking, and application teams.
• Act as the AWS technical authority in design authority and governance forums, and set the standards that others build to.
• Anchor and mentor the AWS capability as it grows, providing the technical foundation for a future in-house cloud team.

Skills

AWS

Cloud architecture

Terraform

CI/CD

Security & compliance

Leadership

Regulatory compliance

Networking

Education

AWS Certification (Professional)

Tools

Terraform

AWS Organizations

Control Tower

CI/CD pipelines

Job description

• Compensation: CAD 120000 - CAD 170000 - yearly

Company Description

Build bold. Deliver impact. Win together.

At General Dynamics Mission Systems–Canada, we’re not just engineering technology — we’re shaping the future of defence and security. Our teams design and deliver advanced, mission‑critical solutions that enhance national security, strengthen communities, and protect the people we serve.

If you’re looking for meaningful work that contributes to a safer, more secure world, you’ll find purpose here. Every day, your skills will directly impact programs that matter.

Job Description

General Dynamics Mission Systems–Canada is seeking a Principal, Cloud Engineering AWS Manager to own the design, build, and operation of our sovereign AWS Canada estate. Reporting into the Chief Digital & Information Officer(CDIO) this is a senior, the successful candidate will set the standards and guardrails for the platform, deliver them in code, and run the environment to the security and compliance bar that a regulated, sovereign defence environment demands.

The role is deliberately positioned as the anchor of the organization's AWS capability. The successful candidate will lead the transition of landing‑zone operations from the current managed-service provider into a sustainable in‑house model and will act as the definitive AWS technical authority across the CDIO organization. This person will be a builder first; comfortable owning outcomes end to end and exercising a high degree of autonomy within the guardrails and priorities set by executive leadership

Key Responsibilities

• Own the architecture, build, and lifecycle of the sovereign AWS Canada landing zone, including multi‑account structure, account vending, and organizational guardrails using AWS Organizations and Control Tower.
• Design and implement core platform networking, including VPC design, Transit Gateway, and Direct Connect connectivity into on-premises and enclave environments.
• Establish platform standards, reference patterns, and the roadmap that balancequality against the constraints of a controlled environment.

Security, Compliance, and Sovereignty

• Design and enforce identity, encryption, logging, and monitoring controls, using services such as IAM, KMS, CloudTrail, GuardDuty, and Security Hub.
• Ensure the platform satisfies CMMC 2.0, ITAR and EAR handling obligations, and Controlled Goods Program requirements, and that data residency and sovereignty are preserved by design.
• Integrate the platform with the organization's security tooling and partner closely with the Cybersecurity function on threat detection and response.

Infrastructure as Code and Automation

• Deliver the environment as code using Terraform or equivalent, and implement policy-as-code, automated provisioning, and drift detection.
• Oversee the build and maintain CI/CD pipelines for platform and workload deployment, reducing manual effort and configuration risk.
• Champion automationas the default operating model for the estate.

Insourcing and Operating Model

• Lead the transition of landing‑zone operations from the managed-service provider to an in‑house model in line with the defined insourcing trigger.
• Define the operating model, runbooks, and standards required to run the platform sustainably, and manage knowledge transfer from the incumbent provider.
• Manage the technical relationship with AWS and platform vendors, and hold them to standards and value.

Platform Enablement and Technical Leadership

• Enable data, AI, and application workloads to land on the platform securely and efficiently, partnering with the data, networking, and application teams.
• Act as the AWS technical authority in design authority and governance forums, and set the standards that others build to.
• Anchor and mentor the AWS capability as it grows, providing the technical foundation for a future in‑house cloud team.

Qualifications

Required Qualifications

• A minimum of 10 years of experience in cloud or infrastructure architecture,with deep, demonstrable expertise designing, building, and operating production AWS environments at scale.
• Expert command of AWS landing‑zone design, including AWS Organizations, Control Tower, multi‑account architecture, core networking, and security services.
• Strong Infrastructure as Code and automation capability, ideally with Terraform, together with hands‑on experience of CI/CD and policy-as-code.
• Proven experience securing and operating cloud within a regulated environment, with a working understanding of the compliance frameworks and change discipline it demands.
• The ability to own outcomes end to end and operate autonomously, and to present platform direction and trade‑offs to an executive audience.
• A senior AWS certification, such as Solutions Architect – Professional or DevOps Engineer – Professional, or equivalent demonstrable expertise.
• Demonstrated mentorship capabilities

Preferred Qualifications

• Dual‑cloud depth across both AWS and Microsoft Azure is highly desirable, given a multi‑cloud estate in which AWS serves as the sovereign landing zone and Azure as the predominant enterprise platform.
• Experience in a defence, government, or critical‑infrastructure environment subject to controlled‑goods or equivalent handling requirements.
• Experience standing up sovereign or otherwise constrained cloud environments, and transitioning operations from a managed‑service provider to an in‑house model.
• Familiarity with CMMC 2.0, ITAR and EAR, and the Canadian Controlled Goods Program.
• Experience working with or familiarity with AI/ML models is preferred.

It is a requirement that General Dynamics Mission Systems-Canada be registered with the Canadian Controlled Goods program and that all of its workforce be security assessed. Successful applicants must meet all applicable security requirements, including but not limited to the ability to obtain and maintain a Canadian government security clearance. Applicants may be required to meet additional security requirements in order to gain access to technical data, classified areas or information that is subject to international regulations. You must be eligible to work in Canada.

Additional Information

The hiring range for this position is $120,000-$170,000. This role is eligible for a management incentive plan. Our goal is to provide a fair and competitive offer based on an assessment of internal equity and your qualifications, including:

• Technical and non-technical skills
• Education and certifications

Benefits
As a full‑time employee at General Dynamics Mission Systems–Canada, you’ll enjoy a competitive total rewards package that supports your professional and personal well‑being:

• Comprehensive medical, dental, and vision coverage for you and eligible dependents from day one (no cost), including flexible benefits options (HCSA) emergency travel insurance, and 24/7 virtual care services.
• Employee & Family Assistance Program (EFAP), onsite fitness facilities, and employee resource groups.
• Defined Contribution Pension Plan with employer contributions after 3 months, RRSP access from day one, and financial planning support.
• Flexible time off including vacation, holidays, parental leaves with top‑up options, sick leave, and disability programs.
• Career development through learning platforms, educational assistance, mentoring, and reimbursement of professional memberships.
• Additional perks such as employee discounts, free onsite parking, social clubs, and an annual scholarship program for employees’ children.
• Purposeful Innovation: You’ll work on innovations that genuinely make a difference. You’ll apply advanced thinking, design expertise, and practical problem‑solving to help equip military and allied forces with leading‑edge systems. You’ll be surrounded by some of the brightest minds in the defence sector, contributing to next‑generation technologies in an environment that celebrates creativity, new ideas, and modern solutions.
• Connection: We believe people do their best work when they feel they belong, and their ideas can flourish. Different perspectives, experiences, and ways of thinking help us innovate and grow. Strong relationships with our teammates help us unite, overcome challenges, and deliver the world‑class quality we’re known for. Here, we are committed to inclusivity and ensures every individual feels valued, respected, and empowered.
• Challenging and Rewarding Career Pathways: Your career path matters to us. From mentorship and regular check‑ins with your leader to educational support, professional certifications, and continuous training, you’ll have the resources you need to thrive. We encourage internal mobility so you can explore different business areas, broaden your skillset, and expand your network. You’ll be working on high‑profile, impactful projects that challenge your skills, expand your expertise, and allow you to both learn from mentors and guide others along the way.

Accommodation
If you require accommodation during any stage of the application process, please contact Human Resources via [emailprotected] .

Job Location