GCP IAM Engineer

JOB DESCRIPTION

The GCP IAM Engineer will be responsible for implementing and operating identity and access management controls within Google Cloud Platform to securely onboard applications in a regulated environment. The role focuses on provisioning IAM roles, managing service accounts, automating access configurations using Terraform, and supporting identity integrations while ensuring compliance with enterprise security and audit standards.
Requirements:
 
Hands-on GCP IAM experience (roles, service accounts, policy inheritance concepts).
Terraform fundamentals (modules, state basics) and Git/PR workflow discipline.
Scripting ability (Python) for automation/validation tasks.
Familiarity with change/release processes and working in controlled environments.
Success measures
Onboarded apps meet access-control standards with minimal rework; IAM incidents reduced; evidence is audit-ready
 
Responsibilities:
 
Provision and manage IAM (roles, bindings, service accounts) across projects using Terraform and Git-based workflows.
Implement least-privilege patterns for application onboarding (runtime identity, human access, break-glass).
Support identity integrations and group/role mappings as defined by enterprise standards.
Produce onboarding evidence (access approvals, deployment records, audit log pointers) and maintain documentation/runbooks.
Troubleshoot access issues and partner with platform/network/security teams to resolve blockers.
 
Skills:
IAM Engineer, Google Cloud Platform