GCP IAM Engineer

Job Description

We are looking for a hands-on GCP IAM Engineer with strong experience in Google Cloud IAM, Terraform, and CI/CD pipelines. The candidate will be responsible for designing and managing secure identity and access management solutions across GCP environments, following least-privilege principles and infrastructure-as-code practices.

Key Responsibilities

Design and manage GCP IAM roles, permissions, and policy bindings using Terraform.

Implement Workforce Identity Federation and Workload Identity Federation.

Manage service accounts, impersonation, and eliminate static service-account keys.

Create and maintain custom roles and reusable access models.

Deploy IAM changes through CI/CD pipelines.

Review access requests and ensure least-privilege access.

Work with IAM Conditions, deny policies, and security governance where required.

Required Skills

Strong hands-on experience with GCP IAM and Terraform.

Knowledge of predefined roles, custom roles, permissions, and IAM inheritance.

Experience with Workforce Identity Federation and Workload Identity Federation

Hands-on experience with service accounts and keyless authentication.

Experience with CI/CD pipelines and infrastructure as code.