IAM Engineer

Job Title- GCP IAM EngineerLocation- Plano, TX 75093Reporting Type- OnsiteWork Timing- Regular Hours Monday to Friday, 9am to 5pmDuration- 8 monthsUS Citizens and Green Card are only preferredW2 candidates are only preferredLocal Candidates will be a preferenceSummaryThe GCP IAM Engineer will be responsible for implementing and operating identity and access management controls within Google Cloud Platform to securely onboard applications in a regulated environment. The role focuses on provisioning IAM roles, managing service accounts, automating access configurations using Terraform, and supporting identity integrations while ensuring compliance with enterprise security and audit standards.ResponsibilitiesProvision and manage IAM (roles, bindings, service accounts) across projects using Terraform and Git-based workflows.Implement least-privilege patterns for application onboarding (runtime identity, human access, break-glass).Support identity integrations and group/role mappings as defined by enterprise standards.Produce onboarding evidence (access approvals, deployment records, audit log pointers) and maintain documentation/runbooks.Troubleshoot access issues and partner with platform/network/security teams to resolve blockers.RequirementsHands-on GCP IAM experience (roles, service accounts, policy inheritance concepts).Terraform fundamentals (modules, state basics) and Git/PR workflow discipline.Scripting ability (Python) for automation/validation tasks.Familiarity with change/release processes and working in controlled environments.Success measuresOnboarded apps meet access-control standards with minimal rework; IAM incidents reduced; evidence is audit-readySkillsIAM EngineerGoogle Cloud Platform