Identity Management Contractor

Position Summary

Contractor

Onsite - Plano, Texas OR Jersey City, New Jersey

Work you'll do

We are seeking an Identity Management Contractor to support the design and delivery of secure-by-default Google Cloud IAM capabilities across enterprise onboarding waves. This role will define reusable IAM patterns, establish Terraform standards, coordinate technical delivery, and partner with security and compliance teams to support scalable identity operations.

Roles and Responsibilities

• Define GCP IAM reference architectures, including RBAC, service accounts, privileged access, and least-privilege patterns.
• Establish Terraform standards for IAM modules, secure binding strategies, drift controls, and change management.
• Facilitate design reviews and document approved patterns, risks, and exceptions.
• Coordinate timelines, dependencies, priorities, and deliverables across onboarding efforts.
• Provide technical guidance to engineers implementing IAM and Terraform solutions.
• Partner with security and compliance teams to address control requirements and audit readiness.
• Develop IAM runbooks, access recertification inputs, operational metrics, and incident response playbooks.
• Promote consistent adoption of repeatable IAM onboarding patterns.

Required Qualifications

• Deep experience designing and implementing GCP IAM in enterprise environments.
• Strong knowledge of IAM policies, custom roles, service accounts, workload identity, and privileged access.
• Experience coordinating multi-team technical delivery and onboarding activities.
• Experience establishing IAM standards, design reviews, and exception documentation.
• Strong Terraform and infrastructure-as-code governance experience.
• Understanding of least privilege, segregation of duties, security-by-design, and audit requirements.
• Strong communication and collaboration skills.

Preferred Qualifications

• Experience with identity governance, access recertification, PAM, and automated policy validation.
• Experience integrating GCP IAM with enterprise identity providers and security tools.
• Familiarity with organization policies, Security Command Center, Cloud Audit Logs, and policy-as-code.
• Experience developing IAM metrics, runbooks, dashboards, and incident response procedures.
• Relevant cloud, cybersecurity, or Terraform certifications.
• Experience supporting cloud migration or application onboarding programs.

The expected pay range for this contract assignment is $60 to $70 per hour. The exact pay rate will vary based on skills, experience, and location and will be determined by the third-party whose employees provide services to Deloitte.

Candidates interested in applying for this opportunity must be geographically based in the United States and must be legally authorized to work in the United States without the need for employer sponsorship

We do not accept agency resumes and are not responsible for any fees related to unsolicited resumes.

Deloitte is not the employer for this role. This work is contracted through a third-party whose employees provides services to Deloitte.

#GS-2

Expected Work Schedule

Approximate hours per week

About Deloitte Our inclusive culture empowers our people to be who they are, contribute their unique perspectives, and make a difference individually and collectively. It makes Deloitte one of the most rewarding places to work.

As used in this posting, “Deloitte” means , a subsidiary of Deloitte LLP. Please see www.deloitte.com/us/about for a detailed description of the legal structure of Deloitte LLP and its subsidiaries.

Requisition code: 367891