Principal Cloud Engineering AWS

What you'll do

• Own the architecture and lifecycle of the sovereign AWS Canada landing zone using Organizations and Control Tower.
• Design and implement core platform networking, including VPCs, Transit Gateways, and Direct Connect connectivity.
• Enforce security controls for identity, encryption, logging, and monitoring to meet CMMC 2.0 and ITAR requirements.
• Deliver the environment as code using Terraform and implement policy-as-code with automated provisioning.
• Lead the transition of landing zone operations from a managed service provider to an in-house model.
• Establish platform standards, runbooks, and technical roadmaps for data, AI, and application workloads.
• Act as the primary AWS technical authority for design governance and internal team mentorship.

What we're looking for

• Minimum of 10 years of experience in cloud or infrastructure architecture with expertise in production AWS environments.
• Expert command of AWS landing-zone design, including Organizations, Control Tower, multi-account architecture, and security services.
• Strong Infrastructure as Code and automation capability using Terraform, CI/CD, and policy-as-code.
• Proven experience securing and operating cloud systems within regulated environments with a focus on compliance and change discipline.
• Ability to operate autonomously, own outcomes end-to-end, and present technical trade-offs to an executive audience.
• A senior AWS certification (Solutions Architect Professional or DevOps Engineer Professional) or equivalent demonstrable expertise.
• Demonstrated mentorship capabilities.
• Must be eligible to work in Canada and able to obtain/maintain a Canadian government security clearance.