Canadian Bank Note Company (CBN) is a leader and trusted provider of secure document and adjacent enterprise-level system solutions across the following domains: border security, civil identity, driver licence/identification and vehicle information, excise control, currency, lotteries and charitable gaming.

Our Corporate Philosophy and 7 Core Principles shape and guide our corporate behaviours and underpin the sense of community you will experience at CBN. We seek long-term relationships with our employees and offer a competitive compensation package that includes health, medical and life insurance benefits and a defined contribution pension plan with company matching.

Job Description

Job Title: Head of Platform Engineering

Job Type: Permanent, Full-time

Work Model: Hybrid

Job Status:Existing Vacancy

Position Summary

CBN has set out to become the leading global platform provider for managing government ID and ID-enabled services. As Head of Platform Engineering, you will build and run that platform: allowing for applications and services to deploy the same way across environments such as Azure, on-prem Red Hat OpenShift, AWS and air-gapped customer sites, with security and compliance built in by design.

You will lead platform teams, translate CBN's vision into the platform roadmap, own technical direction, and stay close to implementation through design reviews, infrastructure-code reviews and complex production troubleshooting.

Key Responsibilities

- Platform Architecture and Scale: Set technical direction, review designs and resolve cross-team technical problems across Azure (AKS, hub-and-spoke landing zones) and Kubernetes/OpenShift.



Design for national-scale identity services and hundreds of millions of credential verifications annually.
- Engineering and Delivery: Work directly with engineers on GitOps, CI/CD and infrastructure automation using Argo CD, Helm, Terraform and JFrog Artifactory. Establish reusable deployment patterns and go-live standards, including secured registries, offline upgrades and signed release bundles verified at air-gapped sites.
- Reliability: Diagnose complex production failures alongside engineers and drive lasting fixes. Set SLOs, observability and capacity requirements using OpenTelemetry and visualization tooling; oversee L2/L3 support and problem management, and verify that backups and disaster recovery work.
- Security by Design: Embed security gates, SBOMs, image signing, SAST/DAST and automated SOC 2/ISO 27001 evidence into delivery. Own Platform's control responsibilities with Security (patching, hardening, access reviews, backups/DR), identify and close security deviations at scale and support audits.
- AI-Enabled Engineering: Support spec-driven development and enhance agents for delivery, change preparation, incident triage, runbook automation, and human approval with audit trails.
- Platform Strategy and Adoption: Translate CBN's vision into a practical roadmap. Work with product, engineering and service delivery teams to onboard jurisdictions,



reduce bespoke deployments and improve developer experience. Support platform bids and explain investment, capacity, commitments and risk to executives.
- Team and Budget Leadership: Hire and develop solid engineers and team leads, allocate staff across DevOps, Infrastructure and DevEx functions, and hold teams accountable for delivery. Own platform spend and vendor contracts, working with Infrastructure & Operations on cost optimisation.

Qualifications

Mandatory Qualifications

- Legally eligible to work in Canada
- Fluent in English (speak, read, write)
- Able to obtain (in a timely manner) and maintain Government of Canada Secret (Level II) security clearance
- Able to work evenings, weekends and holidays as required during security incidents and customer go-lives
- Able to travel approx. 1-2 weeks/year

Minimum Qualifications

- Education: Bachelor's degree in Computer Science, Engineering or a related field, or equivalent experience
- Experience: 10+ years in infrastructure or software engineering leadership, including 5+ years managing leads or managers across multiple teams.
- Operating Record: Demonstrated improvements in production reliability, performance or operating cost. Able to explain the baseline, engineering changes and resulting outcomes.
- Recent Hands-On Engineering: Recent experience writing design specifications, implementing infrastructure or deployment automation, and reviewing code and configurations. Able to diagnose complex production failures alongside engineers.
- Technical Depth: Deep practical experience in at least two of the following, with sufficient

📌 Head of Platform Engineering (Ottawa)
🏢 Canadian Bank Note Company
📍 Ottawa