Senior Site Reliability Engineer - Edge

Senior Site Reliability Engineer - Edge

Location: Ottawa/Toronto, On‑Site

Reports to: Head of Security

You own the edge compute module — the standard hardware stack, OS image, and runtime that integrates with Dominion Dynamics's mesh radios, sensors, and Aura Net SDK and ships field‑ready to customers. Right now that module doesn't fully exist as a hardened, reproducible artifact: devices go to the field inconsistently configured, held together by tribal knowledge. You build what's missing: a standardized provisioning pipeline, a hardened OS baseline (SELinux‑enforcing as the default), secure boot with verified supply‑chain integrity from silicon to running workload, and a dev‑to‑field story that requires no rewrite between bench and deployment.

Observability has to survive DDIL — disconnected, intermittent, and low‑bandwidth conditions — and double as a security signal.

• Build and maintain the standard edge module and its provisioning and lifecycle tooling.
• Define the reliability model from scratch — what "up" means at the edge, what metrics matter, and what SLOs the team operates within.
• Harden the base OS image, enforce supply‑chain integrity, and stand up secure boot and attestation across all nodes.
• Ensure the module integrates cleanly with mesh radios, sensors, and the Aura Net SDK.
• Co‑own the hardened OS baseline with Security — a posture owner, not a downstream consumer.
• Build knowledge: document, standardize, and automate procurement and provisioning end to end.

• A standard, documented provisioning pipeline — image build, flash, config, attest — replacing today's one‑off, misconfigured boxes.
• A hardened base OS baseline across all nodes. We want to move to SELinux‑enforcing as the default, not an afterthought. You'll drive this with Security (you'll work directly with our Head of Security).
• Secure boot + supply‑chain integrity from silicon to running workload: signed images, verified provenance, no mystery binaries.
• A dev‑to‑field story: fast internal prototyping that translates into a hardened, reproducible field build with no rewrite.
• Observability that survives DDIL — telemetry that works within real link, power, and thermal budgets, and that doubles as a security signal.

• Senior/Staff‑level depth running Linux at the edge — embedded/SBC experience in real operational environments, not just cloud VMs.
• Real DDIL experience — built systems that operate disconnected, intermittent, and bandwidth/power‑constrained, and design for it instinctively.
• Edge and embedded fluency:
  Jetson‑class compute, ARM, ROS, cross‑compilation.
• Strong networking fundamentals — can reason about and debug a constrained, multi‑hop network down to the packet.
• Comfort owning a greenfield function — comfortable imposing order on ambiguity.

• Mesh and RF networking experience.
• Hands‑on with SELinux, secure boot, TPM/attestation, reproducible builds, and supply‑chain tooling.
• Defence or regulated‑industry background.
• Cold, thermal, and environmental hardware testing exposure.

No defence background required.

• Competitive base salary and company equity
• Comprehensive health benefits
• Additional equity granted based on impact