What is the Opportunity?

The Applications Lead will support enterprise application delivery and operations, primarily focused on U.S. applications including federal projects operating within a secure enclave environment.

This role is accountable for the support, enhancement, and administration of U.S. applications in the CMMC environment. In addition, this role will work with the IS Enterprise Solutions team on implementing and supporting corporate projects both in the U.S. and Canada.

When necessary, the successful candidate will ensure solutions are delivered and operated in compliance with CMMC, NIST, and Controlled Unclassified Information (CUI) requirements, while aligning to Aecon's construction, infrastructure, and modernization business processes.

This role acts as the primary bridge between business and IT, working closely with Enterprise Architecture, Cybersecurity, Infrastructure, and delivery teams to ensure solutions are fit-for-purpose, compliant, stable, and scalable.

What You'll Do Here:

Domain Ownership & Application Lifecycle

• Administer and support all Enterprise applications within the CMMC environment.
• Liaise with third-party systems integrators as required.
• Contribute to application roadmaps.
• Contribute to enhancement backlog.
• Contribute to release planning aligned to business priorities.

Functional Leadership & Solution Design

• Act as subject matter expert (SME) for the assigned domain (e.g., CMMC, construction platform tools such as the InEight Product Suite, Oracle Primavera P6, Takeoff tools, etc.).
• Lead functional analysis and requirements definition.
• Lead solution design and blueprinting.
• Lead configuration and functional documentation in alignment with Aecon standards and governance.

Business Engagement & Requirements Management

• Partner with business stakeholders to gather, validate, and prioritize requirements.
• Partner with business stakeholders to translate needs into functional and technical solutions.
• Develop strong understanding of Aecon business processes and operating model.

Delivery Execution & Integration

• Lead or coordinate end-to-end delivery of enhancements and projects.
• Ensure alignment to enterprise architecture.
• Ensure integration across enterprise platforms.
• Ensure adherence to Aecon delivery standards.

Testing, Quality & Deployment

• Own or coordinate unit testing.
• Own or coordinate system integration testing.
• Own or coordinate user acceptance testing (UAT).
• Ensure delivery meets quality, compliance, and business expectations.

Application Support & Operational Stability

• Accountable for application performance, availability, and service quality.
• Accountable for incident, problem, and change management (ITIL-aligned).
• Drive root cause analysis.
• Drive issue resolution.
• Drive continuous service improvement.
• Provide administration and support for non-FedRAMP instances of Primavera P6 and InEight Estimate as capacity exists.

Secure Enclave & Compliance Execution

• Ensure applications meet Aecon and federal compliance requirements, including CMMC (Cybersecurity Maturity Model Certification).
• Ensure applications meet NIST 800-171 / 800-53 frameworks.
• Ensure applications meet CUI data handling standards.
• Support audit readiness.
• Support control validation and remediation.
• Maintain documentation, including system artifacts, control evidence, and access records.
• Maintain user provisioning and assignments to specific applications within the CMMC enclave.

Governance & Access Management

• Enforce application governance standards.
• Enforce role-based access control (RBAC).
• Enforce segregation of duties (SoD).
• Partner with Cybersecurity and IAM teams on access provisioning and reviews.

Stakeholder Engagement

• Serve as the primary liaison for business stakeholders and federal project teams in the U.S.
• Provide delivery status updates.
• Provide risk and issue reporting.
• Provide compliance and audit readiness updates.

Team Leadership & Vendor Coordination

• Lead and coordinate a cross-functional team including vendors and system integrators on U.S. projects.
• Lead and coordinate support resources.
• Ensure delivery aligns to security, compliance, and quality expectations.

What You Bring to the Team:

• 5+ years of experience in enterprise applications.
• 5+ years of experience in application delivery and support.
• Experience in regulated or secure environments (federal, infrastructure, engineering).
• Strong knowledge of application lifecycle management.
• Strong knowledge of IT service management (ITIL).
• Strong knowledge of CMMC and/or NIST frameworks.
• Experience working with third-party service providers.

Preferred

• Experience with construction/project systems (e.g., project controls, asset management).
• Familiarity with secure enclave/segregated environments.
• Familiarity with U.S. federal program delivery.
• Exposure to identity and access management tools (Entra ID, SailPoint, Saviynt).

Key Competencies

• Strong functional expertise and domain ownership mindset.
• Accountability for delivery, operations, and governance outcomes.
• Ability to balance business priorities, technical constraints, and security and compliance requirements.
• Strong stakeholder engagement across Business, IT, and Cybersecurity.
• Structured, process-oriented approach to governance and continuous improvement.

Additional Requirements

• Must be authorized to work in the United States.
• Ability to meet U.S. federal project requirements, including security clearance eligibility.
• Ability to meet U.S. federal project requirements, including background checks and compliance certifications.