About the role

Google Cloud IAM DevOps Engineer focusing on secure identity and access management automation on GCP. Responsibilities include designing IAM architectures and automating certificate management.

Responsibilities

Design and implement secure IAM architectures on Google Cloud
Manage IAM roles, policies, and permissions using least privilege principles
Create and maintain Service Accounts and Service Account key policies
Implement Workload Identity Pools and Providers for external workloads accessing GCP securely
Implement Workforce Identity Federation to allow enterprise workforce authentication without service account keys
Design and manage X509 certificate based authentication systems for workloads and external integrations
Implement certificate lifecycle management including issuance, rotation, and revocation
Automate certificate provisioning and renewal processes
Integrate certificate authentication with identity federation and secure workload authentication
Develop reusable Terraform modules to automate IAM and identity federation infrastructure
Implement GitHub Actions pipelines to deploy and manage IAM configurations
Maintain automated pipelines for IAM resource provisioning
Develop automation tools using Python and Shell scripting
Use scripting to automate IAM role audits, Service account lifecycle management, Certificate provisioning and rotation

Google Cloud
Strong hands on experience with: Google Cloud IAM, Service Accounts, Workload Identity Pools, Workload Identity Federation
Workforce Identity Federation
DevOps Infrastructure as Code
Terraform Module development
IAM resource automation
Infrastructure lifecycle management
GitHub Actions CICD pipeline creation
Infrastructure deployment automation
Programming Automation: Python, Shell scripting, Bash
Security Identity: Identity federation, OIDC, SAML, X509 certificate management, Certificate lifecycle management, Secure authentication architectures, Least privilege access models
Preferred Qualifications: Experience integrating with enterprise identity providers (Okta, Azure AD, Ping, etc.)
Familiarity with PKI infrastructure and certificate authorities
Experience building IAM automation platforms at enterprise scale
Experience implementing certificate based workload authentication
Enterprise scale Google Cloud IAM automation
Identity federation platforms
X509 certificate based authentication solutions
Secure CICD pipelines for cloud identity provisioning
Infrastructure as Code driven IAM governance

Paid time off based on employee grade (A-F), defined by policy: Vacation: 12-25 days, depending on grade
Company paid holidays
Personal Days
Sick Leave
Medical, dental, and vision coverage (or provincial healthcare coordination in Canada)
Retirement savings plans (e.g., 401(k) in the U.S., RRSP in Canada)
Life and disability insurance
Employee assistance programs
Other benefits as provided by local policy and eligibility