Cloud Platform Engineer (GCP)

Carbon60; Toronto; On-site; CAD 117,000 - 152,000; Full time

Job summary

OpsGuru is seeking a Senior GCP Platform Enablement Engineer to join a Canadian financial services client on a 14–16 week contract. You will design and implement IaC, identity, networking, and security controls for a production-grade GCP foundation, enabling enterprise-scale cloud adoption.

Collaborate with Security, IAM, Networking, Architecture, and Operations teams to translate business requirements into repeatable platform capabilities, delivering complete documentation and handover.

Qualifications

• Terraform & IaC: modular Terraform in enterprise GCP environments.
• CI/CD: automation pipelines for infrastructure delivery and testing.
• IAM & Security: GCP IAM, RBAC, service accounts, security controls.
• Networking: Shared VPCs, firewalls, DNS, Private Service Connect/Interconnect/VPN.
• Compliance Standards: STIG and CIS benchmarks.
• Policy/Compliance as Code: enforce guardrails programmatically (OPA/Rego, Org Policy, Terraform).
• Production Enablement: enable cloud services in enterprise production.
• Cross-Functional Collaboration: work with Security, IAM, Networking, Architecture, Operations.
• Communication: strong technical writing and stakeholder management.

Responsibilities

• Design, implement, and maintain IaC for GCP orgs, folders, projects, and services.
• Develop CI/CD pipelines to plan, test, scan, and deploy infra & policies with audit trails.
• Implement IAM RBAC and least-privilege models; manage service accounts and workloads.
• Build secure enterprise networks: VPCs, firewalls, DNS, Private connectivity.
• Apply security hardening via STIG/CIS benchmarks across the platform.
• Define guardrails with policy as code (Org Policy, OPA/Rego, Terraform checks).
• Onboard enterprise cloud services into production with runbooks and controls.
• Facilitate design sessions and handover with comprehensive documentation.

Skills

Terraform

IaC

CI/CD

IAM & Security

Networking

Compliance

Policy as Code

Production Enablement

Cross-Functional Collaboration

Communication

Job description

Position Overview

• Role Title: Senior GCP Platform Enablement Engineer


• Company: OpsGuru (Cloud Consultancy)


• Industry: Financial Services


• Engagement Type: Contract (Independent Contractor)


• Workload: Full-Time (40 hours/week)


• Duration: 14–16 weeks (with potential for extension)


• Location: Canada (Onshore) — Must be located and legally eligible to work in Canada


• Budget: CAD 85/h to CAD 110/h depending on seniority

About OpsGuru & The Project

OpsGuru is a cloud consultancy that helps enterprises design, build, secure, and operate modern platforms on major public clouds. Our teams combine deep engineering capability with the governance discipline demanded by highly regulated environments.

In this role, you will join an OpsGuru delivery team on a Google Cloud Platform (GCP) enablement project for a Canadian financial services client. You will build the secure, compliant GCP foundation required to host production and AI workloads.

Role Summary

As a Senior GCP Platform Enablement Engineer, you will design and implement infrastructure, identity, networking, and security controls that enable safe, enterprise-scale adoption of cloud services. You will codify all infrastructure, CI/CD pipelines, policies, and compliance guardrails to deliver a repeatable, auditable platform ready for regulatory oversight.

You will collaborate closely with the client's Security, IAM, Networking, Architecture, and Operations teams to translate business requirements into working platform capabilities, concluding with complete documentation and knowledge transfer.

Key Responsibilities

• Infrastructure as Code (IaC): Design, build, and maintain modular, reusable Terraform modules for GCP organization, folder, project, and service resources.


• CI/CD Automation: Develop pipelines that plan, test, scan, and deploy infrastructure and policy changes with approval gates and audit trails.


• Identity & Access Management (IAM): Implement IAM, RBAC, and least-privilege models, including service account lifecycles, Workload Identity, and privileged access patterns.


• Enterprise Networking: Build and secure VPCs (including Shared VPCs), firewall policies, Cloud DNS, and private connectivity (Private Service Connect, Interconnect, VPN).


• Security Hardening: Apply STIG and/or CIS benchmarks and implement enterprise security controls across the platform and its services.


• Policy & Compliance as Code: Define and enforce guardrails using GCP Organization Policy, OPA/Rego, Terraform policy checks, or equivalent tooling to provide audit-ready evidence.


• Service Enablement: Onboard enterprise cloud and platform services into production along with the controls, patterns, and runbooks needed for safe consumption.


• Stakeholder Collaboration & Handover: Facilitate design sessions, present technical decisions, and deliver comprehensive documentation and training to customer teams.

Required Qualifications & Experience

• Terraform & IaC: Proven hands-on experience structuring modular Terraform within enterprise GCP environments.


• CI/CD: Experience building automation pipelines for infrastructure delivery and testing.


• IAM & Security: Strong grasp of GCP IAM, RBAC, service account management, and security controls.


• Networking: Expertise in GCP enterprise networking (Shared VPCs, firewalls, Cloud DNS, Private Service Connect/Interconnect/VPN).


• Compliance Standards: Hands-on experience implementing STIG and/or CIS benchmarks.


• Policy/Compliance as Code: Experience enforcing platform guardrails programmatically (OPA/Rego, Org Policy, Terraform policy checks).


• Production Enablement: Track record of enabling cloud platform services in enterprise production environments.


• Cross-Functional Collaboration: Ability to partner effectively with Security, IAM, Networking, Architecture, and Operations teams.


• Communication: Excellent technical writing and stakeholder management skills.

Nice-to-Have Skills

• Experience with Gemini Enterprise implementation or enablement.


• Google Cloud Professional Cloud Architect certification.


• Experience in banking, financial services, or other highly regulated environments.


• Experience supporting enterprise Governance, Risk, and Compliance (GRC) processes.


• Experience onboarding AI services into enterprise environments.

Additional Engagement Details

• Background Check: Successful candidates may be required to complete background and security checks prior to onboarding due to financial services compliance requirements.