Google Cloud IAM Engineer

Role Overview: Implement identity, access management, and security controls for the GCP landing zone, translating security designs into operational configurations.Key Responsibilities:Configure IAM roles, service accounts, and access policiesImplement identity federation and SSO integrationSet up Cloud KMS and secrets managementConfigure Cloud Audit Logs and security monitoringImplement VPC Service Controls and perimeter securitySupport security baseline implementation and hardeningTest security configurations and validate controlsTroubleshoot IAM and security issuesMaintain IAM and security documentationSupport security audits and compliance activitiesRequirements:5+ years identity, access management, or security engineering experience (GCP preferred)2+ years hands-on IAM and security implementationStrong knowledge of Google Cloud IAM and security services (Cloud KMS, Secret Manager, VPC Service Controls)Experience configuring identity federation and SSO (SAML, OIDC)Proficiency with automation and scripting (Python, Bash, Terraform)Knowledge of encryption, secrets management, and data securityExperience with audit logging and security monitoring toolsUnderstanding of compliance and security best practicesBachelor's degree in Computer Science, Cybersecurity, or related field (or equivalent experience)