GCP Devops Engineer

Role: GCP IAM EngineerLocation : Plano, TXType: Only on our W2 Role DescriptionSeeking an experienced IAM (Identity and Access Management) Specialist/Engineer to support the implementation of GCP Atlas 2.0 Control Plane and Vertex AI enablement for a large-scale financial services client. This role will be critical in establishing secure, governed access to Google Gemini AI model endpoints while maintaining strict compliance with enterprise security standards. GCP IAM Expertise Deep experience with Google Cloud IAMGCP Vertex AI IAMResource hierarchy  Infrastructure as Code Terraform - Advanced proficiency:GCP provider expertise (google, google-beta)IAM module developmentState management and remote backendsWorkspace and environment managementPython - Strong scripting skills for automation:Google Cloud Client LibrariesIAM policy manipulation and validationAPI integration and orchestrationSecurity & Compliance Strong understanding of zero-trust architecture principlesExperience with data classification and sensitivity-based access controlsKnowledge of financial services compliance requirements (ideally experience with JPMC or similar enterprises)Familiarity with SOC 2, ISO 27001, PCI-DSS or similar frameworksUnderstanding of encryption, key management (Cloud KMS), and secrets management (Secret Manager)Networking & Security Controls Understanding of VPC networking and its intersection with IAM (private Google access, shared VPC)Experience with VPC Service Controls and security perimetersKnowledge of firewall rules, Cloud Armor, and Cloud Load Balancing as they relate to access controlFamiliarity with PrivateLink/Private Service Connect patternsSupporting Technical Skills Git/version control - experience with GitLab, GitHub, or BitbucketCI/CD pipelines - Jenkins, GitLab CI, Cloud Build, or similarAPI security - OAuth 2.0, OIDC, API keys, and token managementLogging and monitoring - Cloud Logging, Cloud Monitoring, integration with SIEM toolsContainer security - GKE workload identity, service mesh authentication (Istio/Anthos Service Mesh)