Principal, Cloud Engineering, AWS

Build bold. Deliver impact. Win together.

At General Dynamics Mission Systems Canada, were not just engineering technology were shaping the future of defence and security. Our teams design and deliver advanced, mission-critical solutions that enhance national security, strengthen communities, and protect the people we serve.

If youre looking for meaningful work that contributes to a safer, more secure world, youll find purpose here. Every day, your skills will directly impact programs that matter.

Full-time

Build bold. Deliver impact. Win together.

At General Dynamics Mission Systems Canada, were not just engineering technology were shaping the future of defence and security. Our teams design and deliver advanced, mission-critical solutions that enhance national security, strengthen communities, and protect the people we serve.

If youre looking for meaningful work that contributes to a safer, more secure world, youll find purpose here. Every day, your skills will directly impact programs that matter.

General Dynamics Mission Systems Canada is seeking a Principal, Cloud Engineering AWS Manager to own the design, build, and operation of our sovereign AWS Canada estate. Reporting into the Chief Digital & Information Officer(CDIO) this is a senior, the successful candidate will set the standards and guardrails for the platform, deliver them in code, and run the environment to the security and compliance bar that a regulated, sovereign defence environment demands.

The role is deliberately positioned as the anchor of the organization's AWS capability. The successful candidate will lead the transition of landing-zone operations from the current managed-service provider into a sustainable in-house model and will act as the definitive AWS technical authority across the CDIO organization. This person will be a builder first; comfortable owning outcomes end to end and exercising a high degree of autonomy within the guardrails and priorities set by executive leadership

Key Responsibilities

Landing Zone Architecture

• Own the architecture, build, and lifecycle of the sovereign AWS Canada landing zone, including multi-account structure, account vending, and organizational guardrails using AWS Organizations and Control Tower.
• Design and implement core platform networking, including VPC design, Transit Gateway, and Direct Connect connectivity into on-premises and enclave environments.
• Establish platform standards, reference patterns, and the roadmap that balance quality against the constraints of a controlled environment.

Security, Compliance, and Sovereignty

• Design and enforce identity, encryption, logging, and monitoring controls, using services such as IAM, KMS, Cloud Trail, Guard Duty, and Security Hub.
• Ensure the platform satisfies CMMC 2.0, ITAR and EAR handling obligations, and Controlled Goods Program requirements, and that data residency and sovereignty are preserved by design.
• Integrate the platform with the organization's security tooling and partner closely with the Cybersecurity function on threat detection and response.

Infrastructure as Code and Automation

• Deliver the environment as code using Terraform or equivalent, and implement policy-as-code, automated provisioning, and drift detection.
• Oversee the build and maintain CI/CD pipelines for platform and workload deployment, reducing manual effort and configuration risk.
• Champion automation as the default operating model for the estate.

Insourcing and Operating Model

• Lead the transition of landing-zone operations from the managed-service provider to an in-house model in line with the defined in sourcing trigger.
• Define the operating model, runbooks, and standards required to run the platform sustainably, and manage knowledge transfer from the incumbent provider.
• Manage the technical relationship with AWS and platform vendors, and hold them to standards and value.

Platform Enablement and Technical Leadership

• Enable data, AI, and application workloads to land on the platform securely and efficiently, partnering with the data, networking, and application teams.
• Act as the AWS technical authority in design authority and governance forums, and set the standards that others build to.
• Anchor and mentor the AWS capability as it grows, providing the technical foundation for a future in-house cloud team.

Required Qualifications

• A minimum of 10 years of experience in cloud or infrastructure architecture,with deep, demonstrable…