GCP IAM Specialist - Cloud-Native Development

Capgemini; Maharashtra; On-site; INR 1,500,000 - 2,100,000; Full time

Benefits offered by this job

Wellness benefits

Flexible work

Career guidance

Job summary

Capgemini is seeking a highly skilled GCP IAM Specialist to design, implement, and govern IAM frameworks across the Google Cloud Platform estate. You will drive secure access controls while enabling cloud-native delivery and collaboration with multiple teams.

The ideal candidate has 5+ years in GCP IAM, strong cloud-native development experience, and hands-on Terraform and Python/Go automation skills. This role is based in Maharashtra with on-site work and growth opportunities within Capgemini.

Qualifications

• 5+ years of hands-on experience with GCP IAM and custom roles.
• Strong background in cloud-native development on Google Cloud Platform.
• Terraform for IAM provisioning and IaC.
• Experience with Workload Identity and service accounts.
• Proficiency in Python or Go for automation.
• Familiarity with Cloud Security & Audit Logs.

Responsibilities

• Design and enforce IAM policies, roles, and permissions across GCP projects and orgs.
• Develop custom IAM roles aligned to least-privilege principles.
• Build cloud-native apps and automation using GCP services.
• Implement Workload Identity Federation and steer service account mgmt.
• Integrate IAM controls with CI/CD and policy-as-code using Terraform.
• Conduct IAM access reviews and audit-log analyses.

Skills

GCP IAM

Cloud-native

Terraform

Workload Identity

CI/CD

Python

Go

Security

Audit Logs

Education

Bachelor's in CS/IT

Tools

Cloud Run

Cloud Functions

App Engine

Pub/Sub

GCS

Job description

Choosing Capgemini means choosing a company where you will be empowered to shape your career in the way you’d like, where you’ll be supported and inspired by a collaborative community of colleagues around the world, and where you’ll be able to reimagine what’s possible. Join us and help the world’s leading organizations unlock the value of technology and build a more sustainable, more inclusive world.

Your Role

We are seeking a highly skilled GCP IAM Specialist with strong cloud-native development expertise to design, implement, and govern identity and access management frameworks across our Google Cloud Platform estate. This role is pivotal in ensuring secure, compliant, and scalable access controls while driving cloud-native application delivery.

Key Responsibilities

• Design and enforce IAM policies, roles, and permission boundaries across GCP projects, folders, and organizations
• Develop and maintain custom IAM roles aligned to least-privilege principles across multi-project GCP environments
• Build and maintain cloud-native applications and automation tooling using GCP-native services (Cloud Run, Cloud Functions, Pub/Sub, GCS)
• Implement Workload Identity Federation and service account management best practices
• Integrate IAM controls with CI/CD pipelines and enforce policy-as-code using Terraform
• Conduct IAM access reviews, audit log analysis via Cloud Audit Logs and Security Command Center
• Collaborate with development and platform teams to embed security controls into cloud-native delivery
• Define and maintain organization-level IAM guardrails using VPC Service Controls and Access Context Manager
• Drive IAM automation using Ansible playbooks for configuration management and drift detection
• Provide technical guidance and IAM governance frameworks to delivery teams

Your Profile

• 5+ years of hands-on experience with GCP IAM, including custom roles and policy management
• Strong proficiency in GCP-native development (Cloud Run, Cloud Functions, App Engine, Pub/Sub)
• Solid Terraform experience for IAM policy provisioning and infrastructure-as-code
• Experience with Workload Identity, service accounts, and federated identity management
• Proficiency in Python or Go for automation and tooling development
• Familiarity with GCP Security Command Center, Cloud Audit Logs, and compliance frameworks
• Experience implementing VPC Service Controls and organization policies
• Understanding of OAuth 2.0, OIDC, and SAML integration patterns on GCP

What You'll Love About Working Here

• You can shape your career with us. We offer a range of career paths and internal opportunities within Capgemini group. You will also get personalized career guidance from our leaders.
• You will get comprehensive wellness benefits including health checks, telemedicine, insurance with top-ups, elder care, partner coverage or new parent support via flexible work.
• At Capgemini, you can work on cutting-edge projects in tech and engineering with industry leaders or create solutions to overcome societal and environmental challenges.

Capgemini is an AI-powered global business and technology transformation partner, delivering tangible business value. We imagine the future of organizations and make it real with AI, technology and people. With our strong heritage of nearly 60 years, we are a responsible and diverse group of 420,000 team members in more than 50 countries. We deliver end-to-end services and solutions with our deep industry expertise and strong partner ecosystem, leveraging our capabilities across strategy, technology, design, engineering and business operations. The Group reported 2024 global revenues of €22.1 billion.

Make it real | www.capgemini.com