CA Cloud Platform Engineer (GCP) carbon60 · Toronto · Platform & Infrastructure Pay not stated 12d ago

Devopsroles; Toronto; On-site; CAD 117,000 - 152,000; Full time

Job summary

OpsGuru is seeking a Senior GCP Platform Enablement Engineer for a Canada-based banking client to design and implement a secure, auditable GCP foundation that supports production and AI workloads.

You will build IaC, IAM, networking, and security controls, codify policies, and deliver complete documentation and training. Collaboration with Security, IAM, Networking, Architecture, and Operations teams is essential.

Qualifications

• . Proven hands-on experience with modular Terraform in enterprise GCP environments.
• . Experience building automation pipelines for infrastructure delivery and testing.
• . Strong grasp of GCP IAM, RBAC, service account management, and security controls.
• . Expertise in GCP enterprise networking (Shared VPCs, firewalls, Cloud DNS, Private Service Connect/Interconnect/VPN).
• . Experience implementing STIG/CIS benchmarks and enterprise security controls.
• . Experience enforcing guardrails as code (OPA/Rego, Org Policy, Terraform policy checks).
• . Track record of enabling cloud platform services in enterprise production environments.
• . Ability to collaborate with Security, IAM, Networking, Architecture, Ops teams.
• . Excellent technical writing and stakeholder management skills.

Responsibilities

• Infrastructure as Code: design, build, and maintain Terraform modules for GCP orgs, folders, projects, and services.
• CI/CD automation: develop pipelines to plan, test, scan, and deploy changes with audit trails.
• IAM: implement RBAC and least-privilege models, service accounts, Workload Identity.
• Enterprise Networking: secure VPCs, firewalls, DNS, private connectivity.
• Security Hardening: apply STIG/CIS benchmarks across platform services.
• Policy & Compliance as Code: enforce guardrails using GCP Organization Policy, OPA/Rego, Terraform policy checks.
• Service Enablement: onboard enterprise services into production with controls and runbooks.
• Stakeholder Collaboration: design sessions, present decisions, deliver documentation and training to customer teams.

Skills

Terraform

CI/CD

GCP IAM

Networking

Security

Policy as Code

Production Enablement

Cross-functional Collaboration

Technical Writing

Tools

Terraform

Job description

Position Overview

• Role Title: Senior GCP Platform Enablement Engineer
• Company: OpsGuru (Cloud Consultancy)
• Industry: Financial Services
• Engagement Type: Contract (Independent Contractor)
• Workload: Full-Time (40 hours/week)
• Duration: 14–16 weeks (with potential for extension)
• Location: Canada (Onshore) — Must be located and legally eligible to work in Canada
• Budget: CAD 85/h to CAD 110/h depending on seniority

About OpsGuru & The Project

OpsGuru is a cloud consultancy that helps enterprises design, build, secure, and operate modern platforms on major public clouds. Our teams combine deep engineering capability with the governance discipline demanded by highly regulated environments.

In this role, you will join an OpsGuru delivery team on a Google Cloud Platform (GCP) enablement project for a Canadian financial services client. You will build the secure, compliant GCP foundation required to host production and AI workloads.

Role Summary

As a Senior GCP Platform Enablement Engineer, you will design and implement infrastructure, identity, networking, and security controls that enable safe, enterprise-scale adoption of cloud services. You will codify all infrastructure, CI/CD pipelines, policies, and compliance guardrails to deliver a repeatable, auditable platform ready for regulatory oversight.

You will collaborate closely with the client's Security, IAM, Networking, Architecture, and Operations teams to translate business requirements into working platform capabilities, concluding with complete documentation and knowledge transfer.

Key Responsibilities

• Infrastructure as Code (IaC): Design, build, and maintain modular, reusable Terraform modules for GCP organization, folder, project, and service resources.
• CI/CD Automation: Develop pipelines that plan, test, scan, and deploy infrastructure and policy changes with approval gates and audit trails.
• Identity & Access Management (IAM): Implement IAM, RBAC, and least-privilege models, including service account lifecycles, Workload Identity, and privileged access patterns.
• Enterprise Networking: Build and secure VPCs (including Shared VPCs), firewall policies, Cloud DNS, and private connectivity (Private Service Connect, Interconnect, VPN).
• Security Hardening: Apply STIG and/or CIS benchmarks and implement enterprise security controls across the platform and its services.
• Policy & Compliance as Code: Define and enforce guardrails using GCP Organization Policy, OPA/Rego, Terraform policy checks, or equivalent tooling to provide audit-ready evidence.
• Service Enablement: Onboard enterprise cloud and platform services into production along with the controls, patterns, and runbooks needed for safe consumption.
• Stakeholder Collaboration & Handover: Facilitate design sessions, present technical decisions, and deliver comprehensive documentation and training to customer teams.

Required Qualifications & Experience

• Terraform & IaC: Proven hands-on experience structuring modular Terraform within enterprise GCP environments.
• CI/CD: Experience building automation pipelines for infrastructure delivery and testing.
• IAM & Security: Strong grasp of GCP IAM, RBAC, service account management, and security controls.
• Networking: Expertise in GCP enterprise networking (Shared VPCs, firewalls, Cloud DNS, Private Service Connect/Interconnect/VPN).
• Compliance Standards: Hands-on experience implementing STIG and/or CIS benchmarks.
• Policy/Compliance as Code: Experience enforcing platform guardrails programmatically (OPA/Rego, Org Policy, Terraform policy checks).
• Production Enablement: Track record of enabling cloud platform services in enterprise production environments.
• Cross-Functional Collaboration: Ability to partner effectively with Security, IAM, Networking, Architecture, and Operations teams.
• Communication: Excellent technical writing and stakeholder management skills.

Nice-to-Have Skills

• Experience with Gemini Enterprise implementation or enablement.
• Google Cloud Professional Cloud Architect certification.
• Experience in banking, financial services, or other highly regulated environments.
• Experience supporting enterprise Governance, Risk, and Compliance (GRC) processes.
• Experience onboarding AI services into enterprise environments.

Additional Engagement Details

• Background Check: Successful candidates may be required to complete background and security checks prior to onboarding due to financial services compliance requirements.