Google Cloud Platform IAM Consultant

Summary:

• Seeking an experienced Google Cloud Platform IAM Engineer to support identity and access management initiatives within a regulated enterprise environment.
• The primary focus of this role is migrating and implementing IAM policies from AWS to Google Cloud Platform, with an emphasis on automation, infrastructure-as-code, and secure application onboarding.

Responsibilities:

• Design, implement, and manage Google Cloud Platform IAM policies, roles, service accounts, and access controls across cloud projects.
• Support AWS-to-Google Cloud Platform IAM policy migration, translating existing access models into Google Cloud Platform-native policies and controls.
• Automate IAM provisioning and policy management using Terraform and Git-based CI/CD workflows.
• Develop automation and validation scripts using Python and/or Golang.
• Apply least-privilege principles for application, service, and human identities.
• Work with Kubernetes/Google Cloud Platform environments to support secure workload and application access.
• Troubleshoot IAM and access-related issues and collaborate with cloud, security, network, and platform teams.
• Maintain documentation, deployment records, audit evidence, and operational runbooks.

Required Skills:

• Strong hands-on experience with Google Cloud Platform IAM
• Experience with AWS-to-Google Cloud Platform IAM policy migration
• Strong Terraform / Infrastructure-as-Code experience
• Python scripting and automation
• Golang experience
• Familiarity with Kubernetes
• Understanding of IAM concepts including roles, bindings, service accounts, policy inheritance, and least privilege
• Experience with Git, pull requests, and controlled deployment/change processes
• Ability to work in a regulated or enterprise environment