Head of Platform Engineering

**Company Description** Canadian Bank Note Company (CBN) is a leader and trusted provider of secure document and adjacent enterprise-level system solutions across the following domains: border security, civil identity, driver licence/identification and vehicle information, excise control, currency, lotteries and charitable gaming. Our Corporate Philosophy and 7 Core Principles shape and guide our corporate behaviours and underpin the sense of community you will experience at CBN. We seek long-term relationships with our employees and offer a competitive compensation package that includes health, medical and life insurance benefits and a defined contribution pension plan with company matching. **Job Description** **Job Title:** Head of Platform Engineering **Job Type:** Permanent, Full-time **Job Location:** 18 Auriga Drive, Ottawa ON **Work Model:** Hybrid **Job Status:** Existing Vacancy **Position Summary** CBN has set out to become the leading global platform provider for managing government ID and ID-enabled services. As Head of Platform Engineering, you will build and run that platform: allowing for applications and services to deploy the same way across environments such as Azure, on-prem Red Hat OpenShift, AWS and air-gapped customer sites, with security and compliance built in by design. You will lead platform teams, translate CBN's vision into the platform roadmap, own technical direction, and stay close to implementation through design reviews, infrastructure-code reviews and complex production troubleshooting. **Key Responsibilities** * **Platform Architecture and Scale:** Set technical direction, review designs and resolve cross-team technical problems across Azure (AKS, hub-and-spoke landing zones) and Kubernetes/OpenShift. Design for national-scale identity services and hundreds of millions of credential verifications annually. * **Engineering and Delivery:** Work directly with engineers on GitOps, CI/CD and infrastructure automation using Argo CD, Helm, Terraform and JFrog Artifactory. Establish reusable deployment patterns and go-live standards, including secured registries, offline upgrades and signed release bundles verified at air-gapped sites. * **Reliability:** Diagnose complex production failures alongside engineers and drive lasting fixes. Set SLOs, observability and capacity requirements using OpenTelemetry and visualization tooling; oversee L2/L3 support and problem management, and verify that backups and disaster recovery work. * **Security by Design:** Embed security gates, SBOMs, image signing, SAST/DAST and automated SOC 2/ISO 27001 evidence into delivery. Own Platform's control responsibilities with Security (patching, hardening, access reviews, backups/DR), identify and close security deviations at scale and support audits. * **AI-Enabled Engineering:** Support spec-driven development and enhance agents for delivery, change preparation, incident triage, runbook automation, and human approval with audit