Senior DevOps Engineer operating AWS and Kubernetes infrastructure for Modern Campus’s higher - education platform. Automating deployments, improving reliability, and supporting customer - facing products.
About the role
- Google Cloud IAM DevOps Engineer focusing on secure identity and access management automation on GCP. Responsibilities include designing IAM architectures and automating certificate management.
Responsibilities
- Design and implement secure IAM architectures on Google Cloud
- Manage IAM roles, policies, and permissions using least privilege principles
- Create and maintain Service Accounts and Service Account key policies
- Implement Workload Identity Pools and Providers for external workloads accessing GCP securely
- Implement Workforce Identity Federation to allow enterprise workforce authentication without service account keys
- Design and manage X509 certificate based authentication systems for workloads and external integrations
- Implement certificate lifecycle management including issuance, rotation, and revocation
- Automate certificate provisioning and renewal processes
- Integrate certificate authentication with identity federation and secure workload authentication
- Develop reusable Terraform modules to automate IAM and identity federation infrastructure
- Implement GitHub Actions pipelines to deploy and manage IAM configurations
- Maintain automated pipelines for IAM resource provisioning
- Develop automation tools using Python and Shell scripting
- Use scripting to automate IAM role audits, Service account lifecycle management, Certificate provisioning and rotation
Requirements
- Google Cloud
- Strong hands on experience with: Google Cloud IAM, Service Accounts, Workload Identity Pools, Workload Identity Federation
- Workforce Identity Federation
- DevOps Infrastructure as Code
- Terraform Module development
- IAM resource automation
- Infrastructure lifecycle management
- GitHub Actions CICD pipeline creation
- Infrastructure deployment automation
- Programming Automation: Python, Shell scripting, Bash
- Security Identity: Identity federation, OIDC, SAML, X509 certificate management, Certificate lifecycle management, Secure authentication architectures, Least privilege access models
- Preferred Qualifications: Experience integrating with enterprise identity providers (Okta, Azure AD, Ping, etc.)
- Familiarity with PKI infrastructure and certificate authorities
- Experience building IAM automation platforms at enterprise scale
- Experience implementing certificate based workload authentication
- Enterprise scale Google Cloud IAM automation
- Identity federation platforms
- X509 certificate based authentication solutions
- Secure CICD pipelines for cloud identity provisioning
- Infrastructure as Code driven IAM governance
Benefits
- Paid time off based on employee grade (A-F), defined by policy: Vacation: 12-25 days, depending on grade
- Company paid holidays
- Personal Days
- Sick Leave
- Medical, dental, and vision coverage (or provincial healthcare coordination in Canada)
- Retirement savings plans (e.g., 401(k) in the U.S., RRSP in Canada)
- Life and disability insurance
- Employee assistance programs
- Other benefits as provided by local policy and eligibility
Job title
Job type
Experience level
Salary
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Cloud Engineer supporting Kinaxis’s AI - powered supply chain orchestration platform reliability. Automating cloud infrastructure, deployments, and production operations across Canadian locations.
Senior DevOps Engineer owning CI/CD, Kubernetes, and cloud infrastructure for Bounteous, a global AI services firm. Automating secure, reliable platforms across the DevOps lifecycle.
DevOps Engineer owning CI/CD and app releases for a gamified sports training platform. Maintaining React Native, Expo/EAS, Supabase, Next.js, and React delivery workflows.
Site Reliability Engineer managing AWS and Kubernetes reliability for Rentsync’s rental - property software products. Leading incident response, observability, automation, and infrastructure hardening.
Deployment & DevOps Engineer deploying BMI’s wireless and software solutions. Managing Kubernetes, CI/CD, Linux, networking, and customer integrations.
Senior DevOps Engineer securing Boeing Canada’s Azure, Kubernetes, and on - premise platforms. Leading CI/CD, infrastructure automation, reliability, compliance, and technical mentorship.
Site Reliability Engineer automating enterprise release orchestration and delivery operations for Sun Life. Supporting platform reliability, Kubernetes automation, and transition to a future release management solution.
Team Leader guiding Remote’s global SRE platform for compliant international employment. Leading engineers and reliability across Kubernetes, AWS, observability, and infrastructure.
AWS and DevOps Engineer establishing secure, automated environments for a bilingual nonprofit digital platform. Managing deployment, monitoring, recovery, and operational handover.