Google Cloud Platform IAM Engineer

Job Title: Google Cloud Platform IAM Engineer

Location: Plano, TX, United States
Job Type: Contract (Onsite)
Duration: Approx. 8 months
Work Schedule: Monday – Friday, 9:00 AM – 5:00 PM (CST)

Job Summary

• The Google Cloud Platform IAM Engineer is responsible for implementing and managing Identity and Access Management (IAM) controls within Google Cloud Platform.
• This role focuses on securely onboarding applications in regulated environments by enforcing access policies and automation practices.
• The engineer will work with cross-functional teams to ensure compliance with enterprise security standards and audit requirements.
• Requires strong expertise in IAM, Terraform, and cloud security best practices.

Key Responsibilities

• Provision and manage IAM roles, bindings, and service accounts across Google Cloud Platform projects.
• Implement infrastructure-as-code solutions using Terraform and Git-based workflows.
• Design and enforce least-privilege access models for applications and users.
• Support application onboarding by configuring runtime identities, human access, and emergency (break-glass) access.
• Manage identity integrations, including group and role mappings aligned with enterprise standards.
• Generate and maintain onboarding documentation, including access approvals, deployment records, and audit logs.
• Troubleshoot and resolve access-related issues in collaboration with platform, network, and security teams.
• Ensure IAM configurations meet compliance, governance, and audit requirements.
• Continuously improve IAM processes and automation for efficiency and scalability.

Required Qualifications

• Hands-on experience with Google Cloud Platform IAM, including roles, service accounts, and policy inheritance.
• Strong understanding of IAM security principles and access control frameworks.
• Experience with Terraform (modules, state management) and infrastructure-as-code practices.
• Proficiency in Git-based workflows (pull requests, version control, collaboration).
• Scripting experience (Python) for automation and validation tasks.
• Familiarity with change management and release processes in controlled environments.
• Strong problem-solving and troubleshooting skills.
• Good communication skills for cross-team collaboration.

Preferred Qualifications

• Experience working in regulated or compliance-driven environments.
• Knowledge of cloud security best practices and governance frameworks.
• Experience with CI/CD pipelines and automation tools.
• Familiarity with identity federation and enterprise identity systems.

Success Metrics

• Applications onboarded with secure, compliant IAM configurations.
• Reduction in IAM-related incidents and access issues.
• Audit-ready documentation and evidence maintained consistently.
• Efficient and automated IAM processes with minimal manual intervention.

Additional Information

• Onsite role based in Plano, TX.
• 40 hours per week with standard business hours.
• Opportunity to work on enterprise-scale cloud security implementations.