GCP Cloud Engineer – IAM & DevOps
Posted Updated
Summary
Architects and maintains secure IAM on Google Cloud Platform — managing resource hierarchies, service accounts, custom roles, and organization policies under least-privilege principles — while analyzing audit logs, remediating IAM risks, and integrating security controls into DevOps CI/CD pipelines.
Summary
We are seeking a highly skilled GCP Cloud Engineer specializing in Identity and Access Management (IAM) and DevOps practices to join our IT Services team. This pivotal role is designed to architect, implement, and maintain robust security frameworks within Google Cloud Platform environments. The successful candidate will be instrumental in safeguarding organizational assets by managing complex IAM resource hierarchies, service accounts, and custom roles while ensuring strict adherence to least-privilege principles. This position is critical for maintaining data integrity, optimizing access governance, and proactively mitigating security risks through continuous audit log analysis and remediation strategies.
Responsibilities
- Design and deploy secure IAM structures, including the management of resource hierarchies, service accounts, and the creation of custom roles and organization policies.
- Enforce least-privilege access models and oversee privileged access management protocols to minimize potential security vulnerabilities.
- Conduct thorough permission reviews and analyze audit logs to identify anomalies, assess compliance, and execute necessary IAM risk remediation actions.
- Implement and maintain access governance frameworks that align with industry best practices and organizational security standards.
- Collaborate with DevOps teams to integrate security controls into CI/CD pipelines, ensuring secure and efficient cloud operations.
- Monitor and audit cloud environments to ensure continuous compliance with internal policies and external regulatory requirements.
Requirements
Requirements:
- Possess 5-7 years of professional work experience in cloud engineering, with a strong focus on Google Cloud Platform.
- Demonstrate advanced proficiency in AWS Cloud technologies alongside deep expertise in GCP IAM components.
- Show proven capability in managing service accounts, defining custom roles, and configuring organization policies.
- Exhibit strong analytical skills for interpreting audit logs and performing detailed permission reviews.
- Have a solid background in implementing least-privilege access strategies and privileged access management solutions.
- Display experience in access governance and the ability to identify and remediate IAM-related security risks.