IAM Engineer

Role & responsibilities

1 working experience in GCP IAM leadership in largescale enterprise environments
2 Must have expertise in designing governing and automating securebydefault access controls across enterprise multiproject organizations
3 Architecture  Strategy Define enterprise IAM strategies reference architectures RoleBased Access Control RBAC models and personabased access frameworks for human and nonhuman identities
4 Policy  Governance Enforce leastprivilege principles custom IAM roles and Segregation of Duties SoD across organization folder and project hierarchies
5 Advanced Security Controls Implement Workload Identity Federation secure service account lifecycles VPC Service Controls and Access Context Manager guardrails
6 Infrastructure as Code IaC Establish policyascode and Terraform standards module patterns safe binding and drift controls integrated into CICD pipelines
7 Audit  Operations Design compliance logging monitor telemetry via Cloud Audit LogsSecurity Command Center and define operational runbooks or incident playbook
8 Leadership  Mentorship Lead crossfunctional architecture workshops review designs handle exceptions and mentor cloud security engineers

Core Requirements  Skills
1 Technical Expertise Deep mastery of GCP resource hierarchy custom roles conditional bindings and enterprise identity provider IdP integrations Active DirectorySAMLOIDC
2 Automation Tools Advanced proficiency in Terraform plus scripting or automation via Python Go or Ansible
3 Frameworks  Compliance Strong working knowledge of securebydesign principles and major regulatory compliance standards.