Principal, Cloud Engineering, AWS

Build bold. Deliver impact. Win together.

At General Dynamics Mission SystemsCanada, were not just engineering technology were shaping the future of defence and security. Our teams design and deliver advanced, mission-critical solutions that enhance national security, strengthen communities, and protect the people we serve.

If youre looking for meaningful work that contributes to a safer, more secure world, youll find purpose here. Every day, your skills will directly impact programs that matter.

Responsibilities for this Position Full-time

Company Description Build bold. Deliver impact. Win together.

At General Dynamics Mission SystemsCanada, were not just engineering technology were shaping the future of defence and security. Our teams design and deliver advanced, mission-critical solutions that enhance national security, strengthen communities, and protect the people we serve.

If youre looking for meaningful work that contributes to a safer, more secure world, youll find purpose here. Every day, your skills will directly impact programs that matter.

Job Description General Dynamics Mission SystemsCanada is seeking a Principal, Cloud Engineering AWS Manager to own the design, build, and operation of our sovereign AWS Canada estate. Reporting into the Chief Digital & Information Officer(CDIO) this is a senior, the successful candidate will set the standards and guardrails for the platform, deliver them in code, and run the environment to the security and compliance bar that a regulated, sovereign defence environment demands.

The role is deliberately positioned as the anchor of the organization's AWS capability. The successful candidate will lead the transition of landing-zone operations from the current managed-service provider into a sustainable in-house model and will act as the definitive AWS technical authority across the CDIO organization. This person will be a builder first; comfortable owning outcomes end to end and exercising a high degree of autonomy within the guardrails and priorities set by executive leadership

Key Responsibilities

Landing Zone Architecture

Own the architecture, build, and lifecycle of the sovereign AWS Canada landing zone, including multi-account structure, account vending, and organizational guardrails using AWS Organizations and Control Tower.

Design and implement core platform networking, including VPC design, Transit Gateway, and Direct Connect connectivity into on-premises and enclave environments.

Establish platform standards, reference patterns, and the roadmap that balancequality against the constraints of a controlled environment.

Security, Compliance, and Sovereignty

Design and enforce identity, encryption, logging, and monitoring controls, using services such as IAM, KMS, CloudTrail, GuardDuty, and Security Hub.

Ensure the platform satisfies CMMC 2.0, ITAR and EAR handling obligations, and Controlled Goods Program requirements, and that data residency and sovereignty are preserved by design.

Integrate the platform with the organization's security tooling and partner closely with the Cybersecurity function on threat detection and response.

Infrastructure as Code and Automation

Deliver the environment as code using Terraform or equivalent, and implement policy-as-code, automated provisioning, and drift detection.

Oversee the build and maintain CI/CD pipelines for platform and workload deployment, reducing manual effort and configuration risk.

Champion automationas the default operating model for the estate.

Insourcing and Operating Model

Lead the transition of landing-zone operations from the managed-service provider to an in-house model in line with the defined insourcing trigger.

Define the operating model, runbooks, and standards required to run the platform sustainably, and manage knowledge transfer from the incumbent provider.

Manage the technical relationship with AWS and platform vendors, and hold them to standards and value.

Platform Enablement and Technical Leadership

Enable data, AI, and application workloads to land on the platform securely and efficiently, partnering with the data, networking, and application teams.

Act as the AWS technical authority in design authority and governance forums, and set the standards that others build to.

Anchor and mentor the AWS capability as it grows, providing the technical foundation for a future in-house cloud team.

Qualifications Required Qualifications

A minimum of 10 years of experience in cloud or infrastructure architecture,with deep, demonstrable expertise designing, building, and operating production AWS environments at scale.

Expert command of AWS landing-zone design, including AWS Organizations, Control Tower, multi-account architecture, core networking, and s