Solutions Architect

Position: Solutions Architect

Work Type: Full time, 3 days Onsite

Salary Range (CAD): $130,000.00 to $145,000 annually

Location: Toronto, ON

Ready to be part of the action?

We are seeking a highly skilled and strategic Solution Architect, Google Workspace & Gemini AI to lead the design, security, and operational enablement of our enterprise Google ecosystem. Reporting directly to the Director of Enterprise Platforms, you will bridge the gap between high-level architectural strategy and hands-on operational delivery. As our definitive subject matter expert (SME), you will dictate the tenant roadmap, establish robust security postures, and empower our IT Operations and L2/L3 Admin teams to safely adopt cutting-edge features. In this role, you will be instrumental in driving secure, compliant, and high-impact enterprise generative AI adoption through Gemini.

Job Location: Hybrid (2–3 days in office) – based in Toronto, ON.

Key Accountabilities

• Architecture & Strategic DesignAct as the principal designer and engineer for the Google Workspace tenant, ensuring organizational units (OUs), groups, and access controls are optimally structured for scale and security.
• Continuously evaluate the Google Workspace and Gemini product roadmaps, translating upcoming features into actionable adoption strategies for the enterprise.
• Design hybrid and cloud-native collaboration workflows that enhance productivity while minimizing administrative overhead.
• Define and oversee solution execution of workflows required across Okta, ServiceNow, etc.and other identity mgmt solutions in working with Security team and platform managers
• Gemini AI Integration & GovernanceLead the enterprise rollout of Gemini for Google Workspace, dictating which AI features should be enabled across different user cohorts and OUs.
• Establish the governance model for generative AI usage within the tenant, ensuring enterprise data protection is actively maintained and AI models do not train on internal proprietary data.
• Design and document AI use cases, prompt engineering best practices, and integration workflows to maximize ROI on Gemini licensing.
• Security, Compliance & Data ProtectionDefine, design, and oversee the implementation of comprehensive Google Workspace security policies, including Context-Aware Access, Data Loss Prevention (DLP) rules, and advanced phishing/malware protections.
• Establish strict security guidelines for Gemini integrations, ensuring all data flows comply with corporate security standards, privacy policies, and regulatory requirements.
• Configure and oversee eDiscovery, retention policies, and legal holds utilizing Google Vault.
• Conduct regular security audits and posture assessments of the Workspace environment, remediating vulnerabilities in partnership with the Cybersecurity team.
• Operations Guidance & Admin EnablementServe as the highest point of technical escalation (Tier 4) and the primary mentor for the IT Operations team and Workspace Administrators.
• Create highly detailed, prescriptive playbooks and Standard Operating Procedures (SOPs) detailing exactly how to configure, turn on, and manage Workspace and Gemini features.
• Lead monthly operational syncs to review tenant health, train admins on new admin console updates, and align the ops team on upcoming architectural changes.
• Automate routine administrative tasks and bulk operations using tools like GAM (Google Apps Manager) and Google Apps Script, handing off polished scripts to the operations team for daily use.
• Embed Non-Functional Requirements (NFRs), including availability, reliability, maintainability, and supportability into all high-level SaaS and Google ecosystem designs to guarantee seamless lifecycle management.
• Ensure all new cloud workflows and tenant modifications seamlessly integrate with established ITIL processes, specifically Change Management, Incident Management, and Problem Management.
• Must Have(s)10+ years of progressive engineering and architectural experience managing large-scale, enterprise-level Google Workspace environments.
• Deep, hands-on expertise with the Google Workspace Admin Console, Google Cloud Identity, and Google Vault.
• Strong understanding of generative AI mechanics and specific experience configuring and deploying Gemini for Google Workspace (or equivalent enterprise AI assistants like Copilot).
• Proven mastery of Google Workspace security constructs: SAML/SSO integration, 2-Step Verification, DLP, Context-Aware Access, OAuth app whitelisting/blacklisting, and API controls and Mailflow.
• High proficiency in automation and scripting specifically for Google environments (GAM, GAMADV-XTD3, Python, and Google Apps Script).
• Professional Google Workspace Administrator.
• Professional Cloud Security Engineer (Google Cloud).
• Exceptional ability to translate complex architectural and security concepts into easy-to-follow, step-by-step guidance for operations teams.
• Strong documentation skills, with a track record of creating robust technical runbooks and architectural diagrams.
• Ability to effectively influence and collaborate with cross-functional leaders, specifically across Enterprise IT, Cybersecurity, and Procurement.
• Nice to Have(s)ITIL Foundation Certification (highly preferred) or a proven, robust understanding of the ITIL service lifecycle framework (Service Design, Service Transition, Service Operation).
• Any certifications or formal training related to AI integration, AI governance, or Prompt Engineering.

Salary Range: 130K/year - 145K/year CAD. Please note that the salary range included is a guideline only. The salary offered may vary based on factors, including, but not limited to, the successful candidate’s relevant knowledge, skills, and experience.

Our voluntary benefits offering includes medical, dental, vision and retirement benefits.

This posting is for an existing vacancy.

If you believe this post to be fraudulent, please report by clicking here.

Tundra Technical Solutions is a global workforce and technology delivery firm, ranked by Staffing Industry Analysts as one of the largest in North America. At Tundra, we aren't just hiring top talent at the world's most recognizable brands; we are pioneers of social recruitment. We are an equal opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, sex, sexual orientation, age, veteran status, disability, genetic information, or other legally protected characteristics. We welcome and encourage diversity in the workplace.

We use artificial intelligence tools to help our recruiters screen and assess talent. These tools do not replace human decision making in the process.

Not interested in this position, but know somebody who might be? Check out our Referral Reward Program, referrals are a big secret behind our success. As always, we’re on the lookout for great people. And we know that you know great people!