Cloud IAM Specialist (GCP)
Share
Job Location:
Monthly Salary:
Posted on:
30+ days ago
Vacancies:
1 Vacancy
Job Summary
What we do
Hi we are Vodeno. We are innovators in the Banking-as-a-Service space. Our technology iscloud-native and our teams work in the cloud like fish in water. Supported by a leading global equity firm and the ecosystem of nearly 90 partners our Platform opens new opportunities for businesses across Europe to integrate financial products and services into their solutions.
As part of the UniCredit Group Aion Bank and Vodeno will accelerate their digital banking offer in strategic markets and will act as a sandbox for innovation for the wider UniCredit Group.
Based on financial sector know-how and expertise in cloud technology we provide a set-up of customer-facing and daily banking services which include: digital onboarding accounts cards payments and lending with a white-label mobile app channel access.
We are defined by the following values:
- Client at the centre - we deliver value to our clients
- Curiosity - we want to know more!
- Accountability - we deliver on our promises
- Collaboration - we can achieve more with others
What you will be doing
The Cloud IAM Specialist ensures secure and compliant access management across all cloud environments in the bank. The role is essential for safeguarding workloads in GCP managing service accounts automating access workflows and ensuring compliance with regulatory and internal security standards.
Role Purpose
The Cloud IAM Specialist is responsible for managing access rights within Google Cloud Platform (GCP) and Google Workspace ensuring compliance with theprinciple of least privilege internal security policies and regulatory requirements (DORA EBA KNF).This role is critical for protecting banking systems in the cloud controlling service accounts and automating access provisioning and deprovisioning.
Key Responsibilities
1. IAM Management in GCP and Google Workspace
Maintain and enforce theleast privilegeprinciple across all environments.
Design implement and review GCP IAM roles (predefined roles custom roles).
Perform regularaccess reviews and recertifications(users groups service accounts).
Review and manage service account permissions keys and their rotation.
Monitor IAM policy changes via Audit Logs and Cloud Asset Inventory.
2. Automation of Access Provisioning & Deprovisioning
Build automation tools to support:
granting and removing access
mass permission updates
compliance reporting
API-driven IAM workflows (Cloud Functions Workflows IAM API).
Develop scripts to validate and enforce IAM policies at scale.
3. Security Monitoring and Control
Identify permission risks overprivileged accounts and misconfigurations.
Use tools such as IAM Recommender Policy Analyzer SCC.
Support incident investigations related to access violations.
Ensure compliance with:
SSO
SAML
OAuth 2.0
JWT
Zero Trust access
4. Audit and Compliance Support
Provide access reports and evidence for internal and external audits (DORA KNF internal audit).
Document IAM processes controls and exceptions.
Participate in architecture and risk assessments related to cloud security.
5. Collaboration with Technical Teams
Work closely with DevOps Data Platform Engineering Workspace Admin and Security Operations.
Advise teams on IAM best practices for new services and migrations.
Support secure design of access models for GCP workloads and Google Workspace integrations.
Skills you should have
Mandatory:
Strong hands-on experience withGCP IAM(roles permissions service accounts bindings).
Proven experience managing access controls in cloud environments.
Programming skills inPython ShellandGoogle Apps Script.
Working experience withGitand repository platforms (GitHub GitLab Bitbucket).
Experience in Infrastructure as Code (IaC)
Working experience with JIRA & Confluence
Good understanding ofGoogle Workspace Admin(groups OUs directory policies).
Knowledge of identity and authentication standards:
SSO
SAML
OAuth 2.0
JWT.
Solid understanding of least privilege zero trust and cloud security best practices.
Be familiar with GitOps Approach
Nice to Have:
Experience with Cloud Identity or GCP Identity Platform.
Experience with automation IAM Processes
Certifications such as:
Google Cloud Security Engineer
Google Cloud Professional Engineer
GIAC Cloud Security
CompTIA Security
Experience working in financial or regulated environments.
Soft Skills
High attention to detail and analytical mindset.
Strong sense of ownership and accountability.
Strong prioritization & troubleshooting skills
Ability to work in a regulated environment with audit exposure.
Effective communication with technical and non-technical stakeholders.
Problem-solving approach and willingness to challenge poor access practices.
What we offer
You will be provided anIndividual Development Budget dedicated to enhancing your professional skills.
If your role permits we also offerflexible work location.
You and your closest family will be covered withVIP-level private medical carewhich includesdental treatmentand ahospitalisation package.
We care for our colleagues well being therefore we coverpsychological consultationsif you ever feel you need such support.
Aion bank accountwithout fee.
We co-sponsor yourMultisportcard and cover50%of its cost.
You will work on computer equipment that delivers the best user experience Apple MacBook.
Our office in Warsaw offershealthy snacksthroughout the day.
Our process
We keep our recruiting process simple.
Step 1: Talk with one of our Recruiters about your experience and ambitions
Step 2: Meet with your future team manager for a technical interview
Step 3: Meet with Line Manager to discuss how we fit each other
Our note to you
Diverse teams really are the best teams. Research shows that some candidates may hesitate to apply for a job unless they meet every requirement. If you are excited about working with us we encourage you to apply - even if youre not 100% sure. We are interested in getting to know you and learning about what you bring to the table.
Please note that we may close a job posting early if we receive a large number of exceptional applications.
Good luck!
Contact information
About us
Required Experience:
IC
Key Skills
- Sales Experience
- Crane
- Customer Service
- Communication skills
- Heavy Equipment Operation
- Microsoft Word
- Case Management
- OSHA
- Team Management
- Catheterization
- Microsoft Outlook Calendar
- EHS
