GCP IAM Engineer

Title Senior GCP IAM Engineer / GCP Cloud Security IAM Engineer Location Remote Duration 12+ Months Video Interview Job Description 9 to 15 years s exp We are seeking a hands-on GCP IAM Engineer to design, implement, and manage identity and access management policies across our Google Cloud environment. The ideal candidate will have deep expertise in structuring IAM access policies using roles, principals, and resources, ensuring least-privilege access and strong governance across projects, folders, and organization-level resources. Key Responsibilities Design and implement fine-grained IAM access policies (roles, principals, resources) aligned with least-privilege and Zero Trust principles Configure and manage custom IAM roles, predefined roles, and conditional access bindings Automate IAM provisioning and policy enforcement using Terraform Build and maintain scripts/tools in Python and Go for IAM automation, auditing, and remediation workflows Troubleshoot access issues, permission conflicts, and policy inheritance across GCP resource hierarchy (org/folder/project/resource) Support Workload Identity Federation, service account governance, and org policy constraints Collaborate with security and platform teams on access reviews, audits, and compliance requirements Document IAM architecture, access models, and operational runbooks Required Skills Strong hands-on experience with GCP IAM (roles, principals, resource hierarchy, conditional IAM, org policies) Proficiency in Terraform for IaC-based IAM and infrastructure provisioning Strong programming skills in Python and Go (Golang) Experience with Workload Identity Federation and service account key management Solid understanding of cloud security, governance, and compliance frameworks Experience troubleshooting IAM-related access and permission issues in production environments GCP certifications (Professional Cloud Security Engineer / Associate Cloud Engineer) Experience with CI/CD pipelines integrating IaC and policy-as-code Exposure to multi-cloud IAM (AWS/Azure) for comparative governance