GCP IAM Engineer

GCP IAM Engineer (Associate) role
Client: Deloitte for JP Morgan Chase
Location: 100% onsite in Plano TX
Interview likely video then in person so candidate MUST be able to do both. If they do the video and can't do in person client said they will be auto rejected so be sure
Candidate must already live in the Plano/Dallas area (no relocation Candidates) also make sure they aren't traveling soon because the interview is in person so can't send if they are out of town








Job Description




Please ensure each candidate is briefed on the correct position and location prior to their interview. We have noticed several candidates were unclear about the job details and location. Please see the specifics below.




IAM Plano Role - DLTJP00053769




Role Description
Seeking an experienced IAM (Identity and Access Management) Specialist/Engineer to support the implementation of GCP Atlas 2.0 Control Plane and Vertex AI enablement for a large-scale financial services client. This role will be critical in establishing secure, governed access to Google Gemini AI model endpoints while maintaining strict compliance with enterprise security standards.




Tech skills needed
Primary Skills:
GCP Python
Level:
Advanced (6-9 years experience)




GCP IAM Expertise
Deep experience with Google Cloud IAM
GCP Vertex AI IAM
Resource hierarchy
Infrastructure as Code
Terraform - Advanced proficiency:
o GCP provider expertise (google, google-beta)
o IAM module development
o State management and remote backends
o Workspace and environment management
Python - Strong scripting skills for automation:
o Google Cloud Client Libraries
o IAM policy manipulation and validation
o API integration and orchestration
Security & Compliance
Strong understanding of zero-trust architecture principles
Experience with data classification and sensitivity-based access controls
Knowledge of financial services compliance requirements (ideally experience with JPMC or similar enterprises)
Familiarity with SOC 2, ISO 27001, PCI-DSS or similar frameworks
Understanding of encryption, key management (Cloud KMS), and secrets management (Secret Manager)
Networking & Security Controls
Understanding of VPC networking and its intersection with IAM (private Google access, shared VPC)
Experience with VPC Service Controls and security perimeters
Knowledge of firewall rules, Cloud Armor, and Cloud Load Balancing as they relate to access control
Familiarity with PrivateLink/Private Service Connect patterns
Supporting Technical Skills
Git/version control - experience with GitLab, GitHub, or Bitbucket
CI/CD pipelines - Jenkins, GitLab CI, Cloud Build, or similar
API security - OAuth 2.0, OIDC, API keys, and token management
Logging and monitoring - Cloud Logging, Cloud Monitoring, integration with SIEM tools
Container security - GKE workload identity, service mesh authentication (Istio/Anthos Service Mesh)