Computer Application Support

Scope of work

The objective of this initiative is to develop a comprehensive technical architecture framework and strategies to modernize and update the Google platform for the client. This includes identifying and updating all relevant policies and requirements to ensure compliance with Treasury Board of Canada Secretariat (TBS) cloud guardrails, as well as providing security monitoring and oversight for cloud spend from SSC. The responsibilities encompass designing and implementing a modernized Google platform architecture, collaborating with stakeholders to align the modernization efforts with organizational goals, and maintaining documentation for the technical architecture framework and strategies. Additionally, the role involves monitoring the platform for compliance with security and cloud spend oversight requirements, producing regular reports on progress and compliance status, and participating in continual process improvement to enhance the Google platform and ensure it meets evolving requirements.

Tasks

1. Modernize and update the Google Landing Zones
   • Obtain iATO for new Google Landing Zone
   • Submit evidence for SA&A
   • Obtain interim authority to operate from DimSecur
   • Update the ConOps, in support of the iATO
2. Transfer Google’s Firewalls to Next Generation Firewalls
   • Plan, manage and transfer firewalls used for the Google tenant to Palo Alto based NGFW.
   • Document all changes and create support SOPs.
3. Virtualized Airgap Offering
   • Build, plan, and manage a virtualized airgap offering to support testing and development of private cloud capabilities.
4. Enable Privileged Access Management for GCP
   • Enable Just in time elevated privilege account management.
5. Recommend and Implement Complex Security Requirements
   • Assess current security measures and identify areas for improvement.
   • Develop and implement advanced security protocols and policies.
   • Ensure compliance with TBS cloud guardrails and other regulatory requirements.
6. Recommend New Products or Processes
   • Evaluate new products and technologies that could enhance the Google platform.
   • Provide recommendations based on thorough research and analysis.
   • Pilot new solutions and assess their impact on user groups.
7. Plan and Participate in System Upgrades
   • Develop a comprehensive plan for department-wide system upgrades.
   • Coordinate with relevant teams to ensure smooth implementation.
   • Monitor progress and address any issues that arise during the upgrade process.
8. Ensure Compliance with Policies and Requirements
   • Review and update policies and requirements to ensure compliance with TBS cloud guardrails.
   • Implement security monitoring and oversight for cloud spend from SSC.
   • Conduct regular audits to ensure ongoing compliance.

Mandatory:

The Bidder must clearly demonstrate that the proposed resource has 7 years of experience within the last 10 years working as a certified* Technical Architect or Special Advisor in the federal government in internationally dispersed secured environments comprised of over 100,000 users and at least 3000 servers, performing all of the following tasks:

• Program managing multiple IT Microsoft infrastructure or cloud related projects valued at least $15M, including activities such as preparing, managing, and reporting on project scope, deliverables, and budget, and articulating project status, including financial schedule, risks, and options to internal managers and clients.
• Providing technical architecture expertise on security elements such as endpoint security, group policy, identity management, VPN design, and network architecture.

* Certified refers to candidates possessing at least one of the following certifications:

• Project Management Professional (PMP)
• Certified Information Systems Security Professional (CISSP)
• Google Associate Cloud Engineer

The Bidder must also demonstrate that the proposed resource has 5 years of experience within the last 7 years working on a cloud project for a large public sector organization with at least 100,000 users, performing tasks such as:

• Developing strategic business and technical roadmaps for cloud adoption.
• Designing and implementing cloud architectures for AWS, Azure, and GCP.
• Developing technical architecture for SaaS (including M365) and public cloud services.
• Engineering connectivity between on-premises infrastructure and hyperscale providers.
• Designing and assessing identity management approaches for cloud and on-premises services.