GCP IAM Engineer

Hi

This is Aditya Staffing Expert from Nexiva Inc . Im reaching out regarding a Role that aligns well with your experience. Let me know if youre open to discuss . Please check below role and share me your updated Resume with contact details or You can share me a References if any one your known looking an Opportunity!

Job Description

Title: GCP IAM Engineer

Location: Onsite in Plano TX Need Local Candidate Already Has To Be Local To The Plano with in 50 miles

Duration: 6 Months

MOI: In-Person

Need LinkedIn

Key Skills Required:

• GCP (Google Cloud Platform) expertise
• Python programming
• Terraform infrastructure-as-code
• Identity and Access Management (IAM) specific knowledge
• Policy migration (AWS to GCP)
• Notes: Work is GCP IAM policy migration-focused NOT traditional IAM roles
• Primary Skills GCP Python
• Level: Advanced (6-9 years experience)

Role Description

Seeking an experienced IAM (Identity and Access Management) Specialist/Engineer to support the implementation of GCP Atlas 2.0 Control Plane and Vertex AI enablement for a large-scale financial services client. This role will be critical in establishing secure governed access to Google Gemini AI model endpoints while maintaining strict compliance with enterprise security standards.

Tech skills needed

GCP IAM Expertise

Deep experience with Google Cloud IAM

GCP Vertex AI IAM

Resource hierarchy

Infrastructure as Code

Terraform - Advanced proficiency:

o GCP provider expertise (google google-beta)

o IAM module development

o State management and remote backends

o Workspace and environment management

Python - Strong scripting skills for automation:

o Google Cloud Client Libraries

o IAM policy manipulation and validation

o API integration and orchestration

Security & Compliance

• Strong understanding of zero-trust architecture principles
• Experience with data classification and sensitivity-based access controls
• Knowledge of financial services compliance requirements (ideally experience with JPMC or similar enterprises)
• Familiarity with SOC 2 ISO 27001 PCI-DSS or similar frameworks
• Understanding of encryption key management (Cloud KMS) and secrets management (Secret Manager)

Networking & Security Controls

• Understanding of VPC networking and its intersection with IAM (private Google access shared VPC)
• Experience with VPC Service Controls and security perimeters
• Knowledge of firewall rules Cloud Armor and Cloud Load Balancing as they relate to access control
• Familiarity with PrivateLink/Private Service Connect patterns

Supporting Technical Skills

• Git/version control - experience with GitLab GitHub or Bitbucket
• CI/CD pipelines - Jenkins GitLab CI Cloud Build or similar
• API security - OAuth 2.0 OIDC API keys and token management
• Logging and monitoring - Cloud Logging Cloud Monitoring integration with SIEM tools
• Container security - GKE workload identity service mesh authentication (Istio/Anthos Service Mesh)

As an Identity Management Contractor you will be responsible for implementing and maintaining identity management solutions to ensure secure and efficient access control. Configure and manage identity management systems to support user authentication and authorization. Implement identity and access management (IAM) policies and procedures in accordance with project requirements. Troubleshoot and resolve issues related to identity management systems and processes. Conduct regular audits and assessments to ensure compliance with security standards and best practices. Develop and maintain documentation for identity management processes and configurations.

Role summary: Implement and operate GCP identity and access controls to onboard applications securely and repeatably in a regulated environment.

Key responsibilities

• Provision and manage IAM (roles bindings service accounts) across projects using Terraform and Git-based workflows.
• Implement least-privilege patterns for application onboarding (runtime identity human access break-glass).
• Support identity integrations and group/role mappings as defined by enterprise standards.
• Produce onboarding evidence (access approvals deployment records audit log pointers) and maintain documentation/runbooks.
• Troubleshoot access issues and partner with platform/network/security teams to resolve blockers.

Required qualifications

• Hands-on GCP IAM experience (roles service accounts policy inheritance concepts).
• Terraform fundamentals (modules state basics) and Git/PR workflow discipline.
• Scripting ability (Python) for automation/validation tasks.
• Familiarity with change/release processes and working in controlled environments.