We are seeking a highly skilled and strategic
Solution Architect, Google Workspace & Gemini AI to lead the design, security, and operational enablement of our enterprise Google ecosystem. Reporting directly to the Director of Enterprise Platforms, you will bridge the gap between high-level architectural strategy and hands-on operational delivery. As our definitive subject matter expert (SME), you will dictate the tenant roadmap, establish robust security postures, and empower our IT Operations and L2/L3 Admin teams to safely adopt cutting-edge features. In this role, you will be instrumental in driving secure, compliant, and high-impact enterprise generative AI adoption through Gemini.
Job Location: Hybrid (2-3 days in office) - based in Toronto, ON.
Key Accountabilities Architecture & Strategic Design- Act as the principal designer and engineer for the Google Workspace tenant, ensuring organizational units (OUs), groups, and access controls are optimally structured for scale and security.
- Continuously evaluate the Google Workspace and Gemini product roadmaps, translating upcoming features into actionable adoption strategies for the enterprise.
- Design hybrid and cloud-native collaboration workflows that enhance productivity while minimizing administrative overhead.
- Define and oversee solution execution of workflows required across Okta, ServiceNow, etc.and other identity mgmt solutions in working with Security team and platform managers
Gemini AI Integration & Governance- Lead the enterprise rollout of Gemini for Google Workspace, dictating which AI features should be enabled across different user cohorts and OUs.
- Establish the governance model for generative AI usage within the tenant, ensuring enterprise data protection is actively maintained and AI models do not train on internal proprietary data.
- Design and document AI use cases, prompt engineering best practices, and integration workflows to maximize ROI on Gemini licensing.
Security, Compliance & Data Protection- Define, design, and oversee the implementation of comprehensive Google Workspace security policies, including Context-Aware Access, Data Loss Prevention (DLP) rules, and advanced phishing/malware protections.
- Establish strict security guidelines for Gemini integrations, ensuring all data flows comply with corporate security standards, privacy policies, and regulatory requirements.
- Configure and oversee eDiscovery, retention policies, and legal holds utilizing Google Vault.
- Conduct regular security audits and posture assessments of the Workspace environment, remediating vulnerabilities in partnership with the Cybersecurity team.
Operations Guidance & Admin Enablement- Serve as the highest point of technical escalation (Tier 4) and the primary mentor for the IT Operations team and Workspace Administrators.
- Create highly detailed, prescriptive playbooks and Standard Operating Procedures (SOPs) detailing exactly how to configure, turn on, and manage Workspace and Gemini features.
- Lead monthly operational syncs to review tenant health, train admins on new admin console updates, and align the ops team on upcoming architectural changes.
- Automate routine administrative tasks and bulk operations using tools like GAM (Google Apps Manager) and Google Apps Script, handing off polished scripts to the operations team for daily use.
- Embed Non-Functional Requirements (NFRs), including availability, reliability, maintainability, and supportability into all high-level SaaS and Google ecosystem designs to guarantee seamless lifecycle management.
- Ensure all new cloud workflows and tenant modifications seamlessly integrate with established ITIL processes, specifically Change Management, Incident Management, and Problem Management.
Must Have(s)- 10+ years of progressive engineering and architectural experience managing large-scale, enterprise-level Google Workspace environments.
- Deep, hands-on expertise with the Google Workspace Admin Console, Google Cloud Identity, and Google Vault.
- Strong understanding of generative AI mechanics and specific experience configuring and deploying Gemini for Google Workspace (or equivalent enterprise AI assistants like Copilot).
- Proven mastery of Google Workspace security constructs: SAML/SSO integration, 2-Step Verification, DLP, Context-Aware Access, OAuth app whitelisting/blacklisting, and API controls and Mailflow.
- High proficiency in automation and scripting specifically for Google environments (GAM, GAMADV-XTD3, Python, and Google Apps Script).
- Professional Google Workspace Administrator.
- Professional Cloud Security Engineer (Google Cloud).
- Exceptional ability to translate complex architectural and security concepts into easy-to-follow, step-by-step guidance for operations teams.
- Strong documentation skills, with a track record of creating robust technical runbooks and architectural diagrams.
- Ability to effectively influence and collaborate with cross-functional leaders, specifically across Enterprise IT, Cybersecurity, and Procurement.
Nice to Have(s) - ITIL Foundation Certification (highly preferred) or a proven, robust understanding of the ITIL service lifecycle framework (Service Design, Service Transition, Service Operation).
- Any certifications or formal training related to AI integration, AI governance, or Prompt Engineering.
Salary Range: 130K/year - 145K/year CAD. Please note that the salary range included is a guideline only. The salary offered may vary based on factors, including, but not limited to, the successful candidate's relevant knowledge, skills, and experience.
The recruiting efforts for this role are intended to fill a vacant position.
