Jobs → Engineering → Cloud Engineer

About the Role We are looking for an experienced GCP Cloud Engineer with strong hands-on expertise in Identity and Access Management (IAM), Terraform, and identity federation to build secure, scalable, and keyless access solutions in a large enterprise cloud environment. Key Responsibilities • Design, implement, and manage GCP IAM policies using Terraform and Infrastructure as Code (IaC) • Manage role bindings, custom roles, and least-privilege access across organizations, folders, and projects • Implement Workforce Identity Federation for secure enterprise user access • Configure Workload Identity Federation for applications and CI/CD pipelines • Manage service accounts, impersonation, and service-account key elimination • Review access requests and ensure compliance with least-privilege principles • Build and deploy IAM configurations through automated CI/CD pipelines. Requirements • Strong hands-on experience with Google Cloud Platform (GCP) IAM • Expertise in Terraform modules and CI/CD pipelines • Strong understanding of predefined roles, custom roles, and permissions • Experience with Workforce Identity Federation and Workload Identity Federation • Knowledge of service accounts, IAM inheritance, and keyless authentication Nice to Have • IAM Deny Policies and IAM Conditions • Large-scale service-account key migration • Custom role design and IAM governance • Experience in regulated enterprise environments