Solution Architect, Google Workspace & Gemini AI

Tundra Technical Solutions; Toronto; Hybrid; CAD 130,000 - 145,000; Full time

Job summary

Tundra Technical Solutions in Toronto seeks a Solution Architect specializing in Google Workspace and Gemini AI to lead design, security, and operational enablement of the enterprise Google ecosystem. Reporting to the Director of Enterprise Platforms, you will shape tenant roadmaps, define governance, and enable IT Operations and Admin teams to adopt advanced AI features securely and compliantly.

This role drives secure, scalable AI adoption across Gemini, with emphasis on DLP, SSO, IAM, and

Qualifications

• 10+ years of progressive engineering and architectural experience
• Hands‑on expertise with Google Workspace Admin Console and Google Vault
• Experience configuring and deploying Gemini for Google Workspace
• Security constructs: SAML/SSO, DLP, Context‑Aware Access, OAuth controls
• Automation/scripting for Google environments (GAM, Python, Apps Script)
• Google Workspace Administrator certification or equivalent
• Ability to translate complex concepts to operations teams
• Strong documentation and runbooks creation
• Cross‑functional collaboration across Enterprise IT, Cybersecurity, and Procurement

Responsibilities

• Lead architecture and design for Google Workspace tenant at enterprise scale
• Define governance for generative AI usage within the tenant
• Oversee security postures, DLP, and data protection aligned to policies
• Mentor IT Operations and Admin teams; deliver SOPs and runbooks
• Automate admin tasks using GAM and Apps Script, hand off scripts
• Coordinate with Security and platform managers for integrations (Okta, ServiceNow)
• Lead Gemini rollout decisions across user cohorts and OUs
• Ensure ITIL change/incident/problem management alignment

Skills

Strategic design

Architectural leadership

Cross-functional collaboration

Security governance

Documentation

Tools

Google Workspace Admin Console

Google Vault

GAM

GAMADV‑XTD3

Python

Google Apps Script

Gemini AI for Workspace

Job description

Our client is seeking a highly skilled and strategic Solution Architect, Google Workspace & Gemini AI to lead the design, security, and operational enablement of our enterprise Google ecosystem. Reporting directly to the Director of Enterprise Platforms, you will bridge the gap between high-level architectural strategy and hands‑on operational delivery. As our definitive subject matter expert (SME), you will dictate the tenant roadmap, establish robust security postures, and empower our IT Operations and L2/L3 Admin teams to safely adopt cutting‑edge features. In this role, you will be instrumental in driving secure, compliant, and high‑impact enterprise generative AI adoption through Gemini.

Job Location: Hybrid (2–3 days in office) – based in Toronto, ON.

Key Accountabilities

Architecture & Strategic Design

• Act as the principal designer and engineer for the Google Workspace tenant, ensuring organizational units (OUs), groups, and access controls are optimally structured for scale and security.
• Continuously evaluate the Google Workspace and Gemini product roadmaps, translating upcoming features into actionable adoption strategies for the enterprise.
• Design hybrid and cloud‑native collaboration workflows that enhance productivity while minimizing administrative overhead.
• Define and oversee solution execution of workflows required across Okta, ServiceNow, etc., and other identity management solutions in working with Security team and platform managers
• Lead the enterprise rollout of Gemini for Google Workspace, dictating which AI features should be enabled across different user cohorts and OUs.
• Establish the governance model for generative AI usage within the tenant, ensuring enterprise data protection is actively maintained and AI models do not train on internal proprietary data.
• Design and document AI use cases, prompt engineering best practices, and integration workflows to maximize ROI on Gemini licensing.

Security, Compliance & Data Protection

• Define, design, and oversee the implementation of comprehensive Google Workspace security policies, including Context‑Aware Access, Data Loss Prevention (DLP) rules, and advanced phishing/malware protections.
• Establish strict security guidelines for Gemini integrations, ensuring all data flows comply with corporate security standards, privacy policies, and regulatory requirements.
• Configure and oversee eDiscovery, retention policies, and legal holds utilizing Google Vault.
• Conduct regular security audits and posture assessments of the Workspace environment, remediating vulnerabilities in partnership with the Cybersecurity team.

Operations Guidance & Admin Enablement

• Serve as the highest point of technical escalation (Tier 4) and the primary mentor for the IT Operations team and Workspace Administrators.
• Create highly detailed, prescriptive playbooks and Standard Operating Procedures (SOPs) detailing exactly how to configure, turn on, and manage Workspace and Gemini features.
• Lead monthly operational syncs to review tenant health, train admins on new admin console updates, and align the ops team on upcoming architectural changes.
• Automate routine administrative tasks and bulk operations using tools like GAM (Google Apps Manager) and Google Apps Script, handing off polished scripts to the operations team for daily use.
• Embed Non‑Functional Requirements (NFRs), including availability, reliability, maintainability, and supportability into all high‑level SaaS and Google ecosystem designs to guarantee seamless lifecycle management.
• Ensure all new cloud workflows and tenant modifications seamlessly integrate with established ITIL processes, specifically Change Management, Incident Management, and Problem Management.

Must Have(s)

• 10+ years of progressive engineering and architectural experience managing large‑scale, enterprise‑level Google Workspace environments.
• Deep, hands‑on expertise with the Google Workspace Admin Console, Google Cloud Identity, and Google Vault.
• Strong understanding of generative AI mechanics and specific experience configuring and deploying Gemini for Google Workspace (or equivalent enterprise AI assistants like Copilot).
• Proven mastery of Google Workspace security constructs: SAML/SSO integration, 2‑Step Verification, DLP, Context‑Aware Access, OAuth app whitelisting/blacklisting, and API controls and Mailflow.
• High proficiency in automation and scripting specifically for Google environments (GAM, GAMADV‑XTD3, Python, and Google Apps Script).
• Professional Google Workspace Administrator.
• Exceptional ability to translate complex architectural and security concepts into easy‑to‑follow, step‑by‑step guidance for operations teams.
• Strong documentation skills, with a track record of creating robust technical runbooks and architectural diagrams.
• Ability to effectively influence and collaborate with cross‑functional leaders, specifically across Enterprise IT, Cybersecurity, and Procurement.

Nice to Have(s)

• ITIL Foundation Certification (highly preferred) or a proven, robust understanding of the ITIL service lifecycle framework (Service Design, Service Transition, Service Operation).
• Any certifications or formal training related to AI integration, AI governance, or Prompt Engineering.

Salary Range: 130K/year - 145K/year CAD. Please note that the salary range included is a guideline only. The salary offered may vary based on factors, including, but not limited to, the successful candidate’s relevant knowledge, skills, and experience.

Why Join Us?

You'll have the opportunity to shape products that bring analytics and AI directly into decision‑making workflows, helping users solve complex operational challenges through intuitive, scalable technology. If you're passionate about creating exceptional digital experiences and building products that deliver measurable business impact, we'd love to hear from you.

This posting is for an existing vacancy.

Tundra Technical Solutions is a global workforce and technology delivery firm, ranked by Staffing Industry Analysts as one of the largest in North America. At Tundra, we aren't just hiring top talent at the world's most recognizable brands; we are pioneers of social recruitment. We are an equal opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, sex, sexual orientation, age, veteran status, disability, genetic information, or other legally protected characteristics. We welcome and encourage diversity in the workplace.

We use artificial intelligence tools to help our recruiters screen and assess talent. These tools do not replace human decision making in the process.