GCP IAM Engineer

Job Description

Job Description

Job Description:
We are looking for a hands-on GCP IAM Engineer with strong experience in Google Cloud IAM, Terraform, and CI/CD pipelines. The candidate will be responsible for designing and managing secure identity and access management solutions across GCP environments, following least-privilege principles and infrastructure-as-code practices.
Key Responsibilities:
Design and manage GCP IAM roles, permissions, and policy bindings using Terraform.
Implement Workforce Identity Federation and Workload Identity Federation.
Manage service accounts, impersonation, and eliminate static service-account keys.
Create and maintain custom roles and reusable access models.
Deploy IAM changes through CI/CD pipelines.
Review access requests and ensure least-privilege access.
Work with IAM Conditions, deny policies, and security governance where required.
Required Skills:
Strong hands-on experience with GCP IAM and Terraform.
Knowledge of predefined roles, custom roles, permissions, and IAM inheritance.
Experience with Workforce Identity Federation and Workload Identity Federation
Hands-on experience with service accounts and keyless authentication.
Experience with CI/CD pipelines and infrastructure as code.