Cloud Engineer
Blessy GovathotiUnited StatesSENIORPosted 11d ago
Google Cloud PlatformGCP IAMTerraformIdentity FederationInfrastructure as Code
About the Role
We are looking for an experienced GCP Cloud Engineer to join our team for a 6-month contract. The role focuses on designing secure, scalable, and least-privilege access solutions in enterprise cloud environments.
Key Responsibilities
• Design and manage GCP IAM policies, custom roles, and role bindings using Terraform
• Implement IAM changes through CI/CD pipelines and reusable Terraform modules
• Manage Workforce Identity Federation for enterprise user access
• Implement Workload Identity Federation for applications and pipelines
• Manage service accounts, impersonation, and keyless authentication
• Apply least-privilege access principles across organization, folder, and project levels
• Review access requests and ensure secure, compliant permission assignments
• Support IAM governance, access controls, and enterprise security standards
Requirements
• Strong hands-on experience with Google Cloud Platform (GCP IAM)
• Expertise in Terraform and Infrastructure as Code (IaC)
• Strong understanding of predefined roles, custom roles, and IAM permissions
• Experience with Workforce Identity Federation and Workload Identity Federation
• Hands-on experience with service accounts and keyless authentication
• Experience implementing IAM through CI/CD pipelines