GCP Cloud IAM Architect

Responsibilities:

• Lead the architecture and design of cloud-native IAM solutions within GCP, aligning with enterprise security and compliance standards.
• Design and build scalable, reusable Terraform modules to manage IAM components across GCP organizations, folders, and projects.
• Collaborate with enterprise security, infrastructure, and application teams to align identity governance with platform automation.
• Provide architectural guidance for integrating GCP IAM with federated identity providers (OIDC, SAML, etc.).
• Oversee DevOps engineering teams implementing IAM solutions; review pull requests and guide junior developers.
• Define standards and best practices for IAM automation using Github Workflows and Terraform.
• Produce technical documentation, solution design diagrams, and runbooks for operational readiness.
• Actively participate in Agile ceremonies; lead backlog refinement and architectural planning discussions in Jira.

Required Technical Skills:

• Architect-level expertise in Google Cloud Platform, particularly around IAM, cloud identity, and resource hierarchy design.
• Proven experience in designing and implementing federated identity architectures (OIDC, SAML) and Google Workspace integrations.
• Expert-level proficiency with Terraform, including module and provider development, state management, and policy as code.
• Strong hands-on experience with GitHub Workflows and modern CI/CD pipelines.
• Familiarity with Zero Trust Architecture and least privilege access controls across cloud environments.
• Solid experience with DevOps tooling such as Jenkins, SALT, Docker, Kubernetes, and scripting in Python or PowerShell.
• Bonus: Experience integrating IAM with HashiCorp Vault or other secrets management systems.

Experience & Education:

• 10+ years of overall IT experience, with at least 5+ years in cloud architecture roles and a focus on IAM/security.
• Prior experience leading cloud transformation or identity modernization initiatives in large enterprises.
• Bachelor’s or Master’s degree in Computer Science, Engineering, or a related technical field.
• Professional Cloud Architect certification on GCP strongly preferred