GCP IAM Specialist

Capgemini; India; Hybrid; INR 1,800,000 - 3,000,000; Full time

Job summary

Capgemini seeks a cloud security specialist focused on Google Cloud IAM design across organisations, folders and projects. You will govern custom roles, service accounts, and federation, while applying policy-as-code and performing access reviews.

Automation with Terraform and Python/Go plus telemetry will shape security posture. Ideal candidates explain governance components like VPC Service Controls and Access Context Manager, and can translate requirements into scalable security controls

Qualifications

• GCP IAM designed across organisations, folders and projects.
• Knowledge of custom IAM roles and service-account governance.
• Experience with Workload Identity Federation and access reviews.
• Ability to automate controls using Terraform plus Python or Go and work with telemetry.

Responsibilities

• Design and govern GCP IAM across the enterprise architecture.
• Define custom roles and manage service accounts at scale.
• Implement policy-as-code and perform access reviews.
• Develop security automation and tooling for governance and auditing.

Skills

GCP IAM design

Terraform

Python

Go

Security automation

Tools

Terraform

Python

Go

Job description

Role in plain language

Cloud security specialist who designs GCP IAM at organisation, folder and project levels, builds custom roles, governs service accounts and federation, applies policy-as-code, performs access reviews and develops security automation.

What to validate in screening

• Has designed GCP IAM across organisations, folders and projects rather than managing basic user access.
• Can explain custom roles, service-account governance and Workload Identity Federation.
• Has implemented VPC Service Controls, organisation policies or Access Context Manager.
• Can automate controls using Terraform plus Python or Go and work with audit/security telemetry.

Primary search keywords

GCP IAM | Google Cloud IAM | IAM Engineer | IAM Specialist | Cloud Security Engineer | Identity and Access Management | Workload Identity Federation | Cloud Governance | Google Cloud Security

Secondary / validation keywords

custom IAM roles | service accounts | OAuth 2.0 | OIDC | SAML | VPC Service Controls | Access Context Manager | Security Command Center | Cloud Audit Logs | organisation policy | Terraform | Python | Go