GCP Security Engineer - IAM Specialist

PwC India; Hyderabad, Gurugram District, Bengaluru; On-site; INR 2,500,000 - 4,000,000; Full time

Job summary

PwC India is seeking a GCP Security Engineer IAM Specialist to design and govern secure access for GCP environments across multiple locations in India. The role emphasizes least-privilege access, federated identity, and robust network/data boundaries.

Key duties include configuring VPC-SC and firewalls, deploying DLP policies, and automating IAM controls with Terraform, while ensuring SOC2/ISO 27001 alignment and incident response readiness.

Qualifications

• Experience in cloud security with hands-on GCP IAM expertise.
• Strong scripting/automation skills (Terraform, Python a plus).

Responsibilities

• Design and enforce IAM policies and least-privilege models.
• Manage Workforce Identity Federation and Entra ID integration.
• Configure VPC-SC, firewalls, network segmentation.
• Deploy Cloud DLP/CEP DLP policies.
• Automate IAM/network controls via Terraform.
• Monitor identity/access logs and support incident response.
• Align IAM controls with SOC2/ISO 27001.

Skills

IAM

Network Security

Data Security

Tools

Terraform

Security Operations

Job description

Job Description: GCP Security Engineer IAM Specialist

Location: Gurugram/ Bangalore/ Hyderabad

Experience: 7+ years

Role Over view: -

Design, implement, and govern secure access controls across GCP; focus on least-privilege access, federated identity, and secure network/data boundaries.

Primary Skills:

• 1. IAM (GCP IAM, Workforce Identity Federation, Entra ID integration, SDP governance)
• 2. Network Security (VPC, Firewalls, VPC-SC)
• 3. Data Security (Encryption/KMS, Cloud DLP, CEP DLP)

Secondary Skills

• 1. Terraform (IaC for IAM/network automation)
• 2. Security Operations (Logging & Monitoring, SIEM integration)

Key Responsibilities:

• 1. Design/enforce IAM policies & least-privilege models
• 2. Manage Workforce Identity Federation & Entra ID integration
• 3. Configure VPC-SC, firewalls, network segmentation
• 4. Deploy Cloud DLP/CEP DLP policies
• 5. Automate IAM/network controls via Terraform
• 6. Monitor identity/access logs; support incident response
• 7. Align IAM controls with SOC2/ISO 27001

Minimum Qualifications

• - 610 years in cloud security, strong hands-on GCP IAM experience
• - Strong scripting/automation (Terraform, Python a plus)