Position: Cloud Engineer (Google AirGap) – x2 Positions
Location: Ottawa, ON (Remote or Hybrid considered)
Start Date: October 2025
Security Clearance: Secret (Mandatory)
Client: Shared Services Canada (SSC)
Contract Type: Independent Contractor

Shared Services Canada (SSC) is seeking two senior-level Cloud Engineers with at least 10 years of experience in cloud architecture and engineering to support secure Google Cloud Platform (GCP) deployments in AirGap environments.

This is a rare and exciting opportunity to contribute to high-impact, secure cloud initiatives within the Government of Canada.

• Design, build, and maintain Google Cloud infrastructure in AirGap (offline/restricted) environments.
• Work closely with cloud architects, DevOps, and security teams to ensure high availability, security, and compliance.
• Automate infrastructure using Infrastructure-as-Code (IaC) tools like Terraform and Ansible.
• Troubleshoot and optimize cloud performance within secure and restricted environments.
• Document system configurations, processes, and operational procedures to support long-term maintainability.
• Support secure patching, deployments, and logging within a non-internet-connected environment.

Requirements

• Minimum 10 years of experience as a Cloud Architect and/or Cloud Engineer, including hands-on GCP work.
• Proven experience working in AirGap or highly secure, offline environments.
• Strong knowledge of GCP services, IAM, networking, and secure containerization (e.g., Docker, Kubernetes).
• Expertise in IaC tools such as Terraform, Ansible, or similar.
• Solid understanding of cloud security best practices and federal compliance frameworks.
• Active Secret clearance (mandatory for submission).
• Availability to start by October 2025.

• Prior experience working with Shared Services Canada (SSC) or other Government of Canada departments.
• Knowledge of Government of Canada IT standards, including ITSG-33.
• Google Cloud certifications (e.g., Professional Cloud Architect, Professional DevOps Engineer).
• Experience in integrating secure logging, monitoring, and automation pipelines within restricted networks.