IAM & Security (Engineer / Lead)

Role 1.) IAM & Security Lead

Role Overview: Design and establish identity, access management, and security frameworks for the Google Cloud Platform landing zone, ensuring enterprise-grade security controls and compliance.

Key Responsibilities:

• Design IAM architecture and organizational policies

• Define custom roles, service account hierarchies, and access patterns
• Design authentication and authorization frameworks (federated identity, SSO integration)
• Plan secrets management and encryption strategy (KMS, Secret Manager)
• Design audit logging and security monitoring architecture
• Establish security baselines and hardening standards
• Lead security design reviews and provide guidance
• Collaborate with security and compliance teams on controls mapping
• Mentor junior security engineers and drive security knowledge
• Maintain security and IAM documentation

Requirements:

• 8+ years of identity, access management, and security experience (Google Cloud Platform preferred)

• 5+ years in enterprise or regulated environments, designing security architectures
• Deep expertise in IAM, identity governance, and access control
• Strong knowledge of Google Cloud IAM, organizational policies, and security services
• Experience designing federated identity and SSO integration
• Expertise in secrets management, encryption (KMS), and data security
• Knowledge of audit logging, compliance, and security monitoring
• Experience with zero-trust and least-privilege principles
• Understanding of compliance frameworks (SOC 2, ISO 27001, PCI-DSS)
• Bachelor's degree in Computer Science, Cybersecurity, or related field

Role 2.) IAM & Security Engineer

Role Overview: Implement identity, access management, and security controls for the Google Cloud Platform landing zone, translating security designs into operational configurations.

Key Responsibilities:

• Configure IAM roles, service accounts, and access policies

• Implement identity federation and SSO integration
• Set up Cloud KMS and secrets management
• Configure Cloud Audit Logs and security monitoring
• Implement VPC Service Controls and perimeter security
• Support security baseline implementation and hardening
• Test security configurations and validate controls
• Troubleshoot IAM and security issues
• Maintain IAM and security documentation
• Support security audits and compliance activities

Requirements:

• 5+ years of identity, access management, or security engineering experience (Google Cloud Platform preferred)

• 2+ years of hands-on IAM and security implementation
• Strong knowledge of Google Cloud IAM and security services (Cloud KMS, Secret Manager, VPC Service Controls)
• Experience configuring identity federation and SSO (SAML, OIDC)
• Proficiency with automation and scripting (Python, Bash, Terraform)
• Knowledge of encryption, secrets management, and data security
• Experience with audit logging and security monitoring tools
• Understanding of compliance and security best practices
• Bachelor's degree in Computer Science, Cybersecurity, or related field (or equivalent experience)