Title: Senior GCP IAM Engineer / GCP Cloud Security IAM Engineer
Location: Remote
Duration: 12+ Months
Video Interview
Job Description:
9 to 15 years s exp
We are seeking a hands-on GCP IAM Engineer to design, implement, and manage identity and access management policies across our Google Cloud environment. The ideal candidate will have deep expertise in structuring IAM access policies using roles, principals, and resources, ensuring least-privilege access and strong governance across projects, folders, and organization-level resources.
Key Responsibilities
Design and implement fine-grained IAM access policies (roles, principals, resources) aligned with least-privilege and Zero Trust principles
Configure and manage custom IAM roles, predefined roles, and conditional access bindings
Automate IAM provisioning and policy enforcement using Terraform
Build and maintain scripts/tools in Python and Go for IAM automation, auditing, and remediation workflows
Troubleshoot access issues, permission conflicts, and policy inheritance across GCP resource hierarchy (org/folder/project/resource)
Support Workload Identity Federation, service account governance, and org policy constraints
Collaborate with security and platform teams on access reviews, audits, and compliance requirements
Document IAM architecture, access models, and operational runbooks
Required Skills
Strong hands-on experience with GCP IAM (roles, principals, resource hierarchy, conditional IAM, org policies)
Proficiency in Terraform for IaC-based IAM and infrastructure provisioning
Strong programming skills in Python and Go (Golang)
Experience with Workload Identity Federation and service account key management
Solid understanding of cloud security, governance, and compliance frameworks
Experience troubleshooting IAM-related access and permission issues in production environments
GCP certifications (Professional Cloud Security Engineer / Associate Cloud Engineer)
Experience with CI/CD pipelines integrating IaC and policy-as-code
Exposure to multi-cloud IAM (AWS/Azure) for comparative governance