GCP Identity Access Management

Role summary: Own IAM design patterns and delivery for onboarding waves; lead engineers and drive secure‑by‑default identity at scale. Key responsibilities Define IAM reference architectures (RBAC model, service account strategy, privileged access patterns). Lead design reviews, approve exceptions, and partner with security/compliance on control requirements. Manage delivery across multiple onboarding efforts (prioritization, timelines, dependency management). Define operational model: runbooks, access recertification inputs, metrics, and incident response playbooks. Required qualifications Deep GCP IAM leadership experience in enterprise environments. Proven experience leading multi‑team delivery and governing standards/exceptions. Strong Terraform/IaC governance and security‑by‑design mindset. Success measures Repeatable IAM onboarding patterns adopted broadly; reduced onboarding cycle time; clean audit outcomes. Role summary: Implement and operate GCP identity and access controls to onboard applications securely and repeatably in a regulated environment. Key responsibilities Provision and manage IAM (roles, bindings, service accounts) across projects using Terraform and Git‑based workflows. Implement least‑privilege patterns for application onboarding (runtime identity, human access, break‑glass). Support identity integrations and group/role mappings as defined by enterprise standards. Produce onboarding evidence (access approvals, deployment records, audit log pointers) and maintain documentation/runbooks. Troubleshoot access issues and partner with platform/network/security teams to resolve blockers. Required qualifications Hands‑on GCP IAM experience (roles, service accounts, policy inheritance concepts). Terraform fundamentals (modules, state basics) and Git/PR workflow discipline. Scripting ability (Python) for automation/validation tasks. Familiarity with change/release processes and working in controlled environments. Success measures Onboarded apps meet access‑control standards with minimal rework; IAM incidents reduced; evidence is audit‑ready #J-18808-Ljbffr New York Technology Partners