Google Cloud Platform IAM Engineer

Job Description

We are seeking a skilled professional responsible for implementing and operating Google Cloud Platform (Google Cloud Platform) identity and access controls to securely onboard applications in a regulated environment. The role involves ensuring that applications are provisioned with secure, repeatable access configurations while maintaining compliance with enterprise standards. The ideal candidate will collaborate with platform, security, and networking teams to resolve access issues, maintain documentation, and ensure proper governance of IAM policies. This position requires hands-on experience with IAM management, infrastructure automation, and scripting to support secure application onboarding and operational excellence.

Required Skills

• Google Cloud Platform (Google Cloud Platform) IAM roles, bindings, service accounts
• Identity and Access Management policy implementation
• Terraform for infrastructure provisioning
• Git and pull request (PR) workflow
• Python scripting for automation and validation
• Access troubleshooting and incident resolution
• Identity integrations and role/group mapping
• IAM policy inheritance and least-privilege access models

Required Qualifications

• Hands-on experience with Google Cloud Platform IAM administration and policy management
• Experience using Terraform modules and managing state
• Strong understanding of Git-based workflows and version control
• Proficiency in Python scripting for automation tasks
• Experience working in regulated or controlled environments
• Familiarity with change management and release processes

Additional Skills

• Experience implementing least-privilege access patterns
• Knowledge of runtime identities and service account design
• Understanding of break-glass access processes
• Experience producing audit evidence and compliance documentation
• Ability to create runbooks and operational documentation
• Strong collaboration skills with platform, security, and networking teams