Google Cloud Platform IAM Engineer

Job Title: Google Cloud Platform IAM Engineer 
Location: Plano, TX
Experience Level: 7+ years

Role Summary
We are seeking a Google Cloud Platform IAM Engineer to implement and operate identity and access controls that support secure, repeatable application onboarding in a regulated environment. This role will focus on hands-on IAM administration, Terraform-based delivery, and audit-ready documentation to ensure access is provisioned consistently and in line with enterprise standards.

Key Responsibilities
Provision and manage Google Cloud Platform IAM resources, including roles, bindings, and service accounts, across projects using Terraform and Git-based workflows.

Implement least-privilege access patterns for application onboarding, including runtime identity, human access, and break-glass access.
Support identity integrations and group/role mappings aligned to enterprise standards.
Produce onboarding evidence such as access approvals, deployment records, and audit log references, while maintaining documentation and runbooks.
Troubleshoot access issues and partner with platform, network, and security teams to remove blockers and resolve dependencies.
Assist with change and release processes in controlled environments, ensuring access changes are traceable and compliant.

Required Qualifications

Hands-on Google Cloud Platform IAM experience, including roles, service accounts, and policy inheritance concepts.
Strong Terraform fundamentals, including modules and state basics, plus disciplined Git/PR workflows.
Python scripting ability for automation and validation tasks.
Familiarity with change and release processes in regulated or controlled environments.
Strong troubleshooting, documentation, and cross-team collaboration skills