GCP IAM Architect/Lead

Job Description

Job Description

Indent : SF_OP_207662-1
Role : GCP IAM Architect/Lead
Location : Charlotte, NC (Hybrid)
Rate: $65/hr to $70/hr

Professional Summary
Seasoned GCP IAM Architect with 15 years of experience in Identity & Access Management, Cloud Security, and Enterprise Architecture. Proven expertise in designing and implementing large-scale access governance solutions, persona-based access models, entitlement frameworks, and cloud security architectures within highly regulated environments.
Strong experience in Google Cloud Platform (GCP), enterprise IAM ecosystems, Active Directory integration, access governance, audit compliance, and security architecture. Adept at driving strategic architecture initiatives, stakeholder engagement, governance forums, and enterprise cloud transformation programs. Aligned with Wells Fargo's GCP Entitlement & Access Control Design, Implementation & Enablement initiative
Key Responsibilities

• Own and drive the enterprise GCP IAM architecture strategy and roadmap.
• Design persona-based access models for both human and non-human identities across Sandbox, Non-Prod, and Production environments.
• Define role hierarchy, entitlement catalogs, access governance standards, naming conventions, and metadata frameworks.
• Establish least privilege and Segregation of Duties (SoD) controls across GCP environments.
• Design and oversee integration between GCP, Active Directory, ART, AIMS, ACT and enterprise IAM platforms.
• Define access request, approval, provisioning, certification, and lifecycle management processes.
• Architect audit logging, monitoring, compliance reporting, and continuous access governance solutions.
• Lead architecture workshops with Security, IAM, Cloud Engineering, Governance, and Application teams.
• Create architecture blueprints, implementation roadmaps, reference patterns, runbooks, and governance documentation.
• Provide technical leadership during implementation, testing, rollout, and knowledge transfer activities.
• Drive cloud security best practices and support regulatory and audit requirements.
• Mentor architects, engineers, and technical leads across the program.

Core Technical Expertise
IAM & Security Architecture

• Enterprise Identity & Access Management
• GCP IAM
• Role-Based Access Control (RBAC)
• Attribute-Based Access Control (ABAC)
• Segregation of Duties (SoD)
• Privileged Access Governance
• Access Certification & Reviews
• Entitlement Management

Cloud Security & Platform Engineering

• Google Cloud Platform (GCP)
• Cloud Identity
• Service Accounts & Workload Identities
• Cloud Audit Logs
• Security Command Center
• Organization Policies
• IAM Recommender

Identity Integration

• Active Directory
• LDAP
• SAML / OAuth / OIDC
• Identity Federation
• Enterprise IAM Platforms

Automation & Policy Management

• Terraform
• Infrastructure as Code (IaC)
• Policy-as-Code
• Open Policy Agent (OPA)
• CI/CD Integration

Governance, Risk & Compliance

• Least Privilege Models
• Audit & Compliance Controls
• Risk Management
• Financial Services Security Standards
• Regulatory Compliance Frameworks

Leadership & Stakeholder Management

• Enterprise Architecture Governance
• Executive Stakeholder Management
• Cloud Security Strategy
• Cross-Functional Team Leadership
• Architecture Review Boards
• Client Engagement & Consulting

Preferred Qualifications

• Google Professional Cloud Architect Certification.
• Google Professional Cloud Security Engineer Certification.
• Experience implementing enterprise-scale IAM solutions on GCP.
• Experience in Banking, Financial Services, or other highly regulated industries.
• Strong understanding of access governance, compliance controls, auditability, and cloud security frameworks.
• Experience working with global onsite-offshore delivery teams.

Business & Strategic Impact

• Establishes a scalable and secure enterprise-wide GCP IAM model.
• Improves security posture through least privilege and SoD enforcement.
• Enables audit readiness and regulatory compliance.
• Enhances operational efficiency through automated access governance.
• Accelerates cloud adoption while maintaining security and governance standards.
• Creates reusable IAM frameworks and onboarding assets for future platform expansion.