Job Location: Hybrid (2–3 days in office) – based in Toronto, ON.
Key Accountabilities
Architecture & Strategic Design
Act as the principal designer and engineer for the Google Workspace tenant, ensuring organizational units (OUs), groups, and access controls are optimally structured for scale and security.
Continuously evaluate the Google Workspace and Gemini product roadmaps, translating upcoming features into actionable adoption strategies for the enterprise.
Design hybrid and cloud-native collaboration workflows that enhance productivity while minimizing administrative overhead.
Define and oversee solution execution of workflows required across Okta, ServiceNow, etc.and other identity mgmt solutions in working with Security team and platform managers
Gemini AI Integration & Governance
Lead the enterprise rollout of Gemini for Google Workspace, dictating which AI features should be enabled across different user cohorts and OUs.
Establish the governance model for generative AI usage within the tenant, ensuring enterprise data protection is actively maintained and AI models do not train on internal proprietary data.
Design and document AI use cases, prompt engineering best practices, and integration workflows to maximize ROI on Gemini licensing.
Security, Compliance & Data Protection
Define, design, and oversee the implementation of comprehensive Google Workspace security policies, including Context-Aware Access, Data Loss Prevention (DLP) rules, and advanced phishing/malware protections.
Establish strict security guidelines for Gemini integrations, ensuring all data flows comply with corporate security standards, privacy policies, and regulatory requirements.
Configure and oversee eDiscovery, retention policies, and legal holds utilizing Google Vault.
Conduct regular security audits and posture assessments of the Workspace environment, remediating vulnerabilities in partnership with the Cybersecurity team.
Operations Guidance & Admin Enablement
Serve as the highest point of technical escalation (Tier 4) and the primary mentor for the IT Operations team and Workspace Administrators.
Create highly detailed, prescriptive playbooks and Standard Operating Procedures (SOPs) detailing exactly how to configure, turn on, and manage Workspace and Gemini features.
Lead monthly operational syncs to review tenant health, train admins on new admin console updates, and align the ops team on upcoming architectural changes.
Automate routine administrative tasks and bulk operations using tools like GAM (Google Apps Manager) and Google Apps Script, handing off polished scripts to the operations team for daily use.
Embed Non-Functional Requirements (NFRs), including availability, reliability, maintainability, and supportability into all high-level SaaS and Google ecosystem designs to guarantee seamless lifecycle management.
Ensure all new cloud workflows and tenant modifications seamlessly integrate with established ITIL processes, specifically Change Management, Incident Management, and Problem Management.
Must Have(s)
10+ years of progressive engineering and architectural experience managing large-scale, enterprise-level Google Workspace environments.
Deep, hands-on expertise with the Google Workspace Admin Console, Google Cloud Identity, and Google Vault.
Strong understanding of generative AI mechanics and specific experience configuring and deploying Gemini for Google Workspace (or equivalent enterprise AI assistants like Copilot).
Proven mastery of Google Workspace security constructs: SAML/SSO integration, 2-Step Verification, DLP, Context-Aware Access, OAuth app whitelisting/blacklisting, and API controls and Mailflow.
High proficiency in automation and scripting specifically for Google environments (GAM, GAMADV-XTD3, Python, and Google Apps Script).
Professional Google Workspace Administrator.
Professional Cloud Security Engineer (Google Cloud).
Exceptional ability to translate complex architectural and security concepts into easy-to-follow, step-by-step guidance for operations teams.
Strong documentation skills, with a track record of creating robust technical runbooks and architectural diagrams.
Ability to effectively influence and collaborate with cross-functional leaders, specifically across Enterprise IT, Cybersecurity, and Procurement.
Nice to Have(s)
ITIL Foundation Certification (highly preferred) or a proven, robust understanding of the ITIL service lifecycle framework (Service Design, Service Transition, Service Operation).
Any certifications or formal training related to AI integration, AI governance, or Prompt Engineering.
Salary Range: 130K/year - 145K/year CAD. Please note that the salary range included is a guideline only. The salary offered may vary based on factors, including, but not limited to, the successful candidate’s relevant knowledge, skills, and experience.
The recruiting efforts for this role are intended to fill a vacant position.
In the market for…
Excitement - Explore emerging technology and innovation, as well as ventures and digital finance that shape the future of global markets! Experience the movement of the market while grounded in the stability of close to 200 years of success.
Connection - With site hubs in some of the world’s most multicultural cities, we leverage our size and structure to create rich connections and belonging while experiencing powerful global impact through our work.
Impact - More than a platform, we use our talents to power mission-critical systems that drive global economic advancement, innovation, and growth. As well, our employee-led Team Impact spreads social good via our giving strategy.
Wellness - From empathetic leadership to a culture of flexibility and balance, we believe wellness at work creates the maximum yield and a stronger “we”. Plus, with a cloud-first and hybrid workstyle, as well as generous time-off and leaves, we support a life well lived!
Growth - From a growth mindset in our work, to expansion in our business, TMX is home to action-takers energized by the achievement of ambitious growth.
Ready to enrich your career with impactful work, leaders who truly care, and the flexibility and programs to help you thrive as part of #TeamTMX ? Apply now.
Please note that our company is not currently sponsoring work permit applications and the applicant must be authorized to work in the country where this position is located.
TMX is committed to creating and sustaining a collegial work environment in which all individuals are treated with dignity and respect and one which reflects the diversity of the community in which we operate. We provide accommodations for applicants and employees who require it.
