Position Overview
- Role Title: Senior GCP Platform Enablement Engineer
- Company: OpsGuru (Cloud Consultancy)
- Industry: Financial Services
- Engagement Type: Contract (Independent Contractor)
- Workload: Full-Time (40 hours/week)
- Duration: 14–16 weeks (with potential for extension)
- Location: Canada (Onshore) — Must be located and legally eligible to work in Canada
- Budget: CAD 85/h to CAD 110/h depending on seniority
About OpsGuru & The Project
OpsGuru is a cloud consultancy that helps enterprises design, build, secure, and operate modern platforms on major public clouds. Our teams combine deep engineering capability with the governance discipline demanded by highly regulated environments.
In this role, you will join an OpsGuru delivery team on a Google Cloud Platform (GCP) enablement project for a Canadian financial services client. You will build the secure, compliant GCP foundation required to host production and AI workloads.
Role Summary
As a Senior GCP Platform Enablement Engineer, you will design and implement infrastructure, identity, networking, and security controls that enable safe, enterprise-scale adoption of cloud services. You will codify all infrastructure, CI/CD pipelines, policies, and compliance guardrails to deliver a repeatable, auditable platform ready for regulatory oversight.
You will collaborate closely with the client's Security, IAM, Networking, Architecture, and Operations teams to translate business requirements into working platform capabilities, concluding with complete documentation and knowledge transfer.
Key Responsibilities
- Infrastructure as Code (IaC): Design, build, and maintain modular, reusable Terraform modules for GCP organization, folder, project, and service resources.
- CI/CD Automation: Develop pipelines that plan, test, scan, and deploy infrastructure and policy changes with approval gates and audit trails.
- Identity & Access Management (IAM): Implement IAM, RBAC, and least-privilege models, including service account lifecycles, Workload Identity, and privileged access patterns.
- Enterprise Networking: Build and secure VPCs (including Shared VPCs), firewall policies, Cloud DNS, and private connectivity (Private Service Connect, Interconnect, VPN).
- Security Hardening: Apply STIG and/or CIS benchmarks and implement enterprise security controls across the platform and its services.
- Policy & Compliance as Code: Define and enforce guardrails using GCP Organization Policy, OPA/Rego, Terraform policy checks, or equivalent tooling to provide audit-ready evidence.
- Service Enablement: Onboard enterprise cloud and platform services into production along with the controls, patterns, and runbooks needed for safe consumption.
- Stakeholder Collaboration & Handover: Facilitate design sessions, present technical decisions, and deliver comprehensive documentation and training to customer teams.
Required Qualifications & Experience
- Terraform & IaC: Proven hands-on experience structuring modular Terraform within enterprise GCP environments.
- CI/CD: Experience building automation pipelines for infrastructure delivery and testing.
- IAM & Security: Strong grasp of GCP IAM, RBAC, service account management, and security controls.
- Networking: Expertise in GCP enterprise networking (Shared VPCs, firewalls, Cloud DNS, Private Service Connect/Interconnect/VPN).
- Compliance Standards: Hands-on experience implementing STIG and/or CIS benchmarks.
- Policy/Compliance as Code: Experience enforcing platform guardrails programmatically (OPA/Rego, Org Policy, Terraform policy checks).
- Production Enablement: Track record of enabling cloud platform services in enterprise production environments.
- Cross-Functional Collaboration: Ability to partner effectively with Security, IAM, Networking, Architecture, and Operations teams.
- Communication: Excellent technical writing and stakeholder management skills.
Nice-to-Have Skills
- Experience with Gemini Enterprise implementation or enablement.
- Google Cloud Professional Cloud Architect certification.
- Experience in banking, financial services, or other highly regulated environments.
- Experience supporting enterprise Governance, Risk, and Compliance (GRC) processes.
- Experience onboarding AI services into enterprise environments.
Additional Engagement Details
- Background Check: Successful candidates may be required to complete background and security checks prior to onboarding due to financial services compliance requirements.
Compensation: CAD 85/h - CAD 110/h
