Google Cloud Platform Identity Management Engineer
Onsite in Dallas/Plano, TX
interview in-person
Role summary:
Own IAM design patterns and delivery for onboarding waves; lead engineers and drive secure-by-default identity at scale.
Key responsibilities
Define IAM reference architectures (RBAC model, service account strategy, privileged access patterns).
Establish Terraform standards for IAM (module patterns, safe binding strategies, drift controls).
Lead design reviews, approve exceptions, and partner with security/compliance on control requirements.
Manage delivery across multiple onboarding efforts (prioritization, timelines, dependency management).
Define operational model: runbooks, access recertification inputs, metrics, and incident response playbooks.
Required qualifications
Deep Google Cloud Platform IAM leadership experience in enterprise environments.
Proven experience leading multi-team delivery and governing standards/exceptions.
Strong Terraform/IaC governance and security-by-design mindset.
Success measures
Repeatable IAM onboarding patterns adopted broadly; reduced onboarding cycle time; clean audit outcomes.
**Must have Google Cloud Platform IAM - cloud identity and access mgmt, how Google Cloud Platform allows identity to be set up, know how to set up roles, permissions in google cloud
**Should be able to write terraform scripts to set up IaC
**Python scripting should also be a skill candidates possess, general python scripting