IAM Engineer

Elabs Infotech; Hyderabad, Bengaluru, Dadri; Sur place; INR 1 800 000 - 2 400 000; Plein temps

Résumé du poste

LTI Mindtree is seeking a lead Cloud IAM architect to drive enterprise IAM strategy for Google Cloud Platform. You will define RBAC models, persona-based access, and enforce least-privilege access across multi-project orgs.

You will implement policy-as-code, CI/CD-integrated Terraform standards, and advanced security controls, while mentoring engineers and leading architecture sessions.

Qualifications

• Technical mastery of GCP resource hierarchy, custom roles, and IdP integrations.
• Automation: Terraform plus scripting (Python/Go/Ansible).
• Knowledge of secure-by-design principles and regulatory standards.

Responsabilités

• Lead GCP IAM architecture in large enterprise environments.
• Design secure-by-default access controls across multi-project orgs.
• Define enterprise IAM strategy, RBAC models, and persona-based access.
• Govern policy and enforce least privilege across folders and projects.
• Implement advanced security controls like WIF, SAI, VPC Service Controls.
• Establish policy-as-code and Terraform standards in CI/CD.
• Audit logging, monitoring, and incident playbooks across Cloud services.
• Mentor cloud security engineers and lead architecture workshops.

Connaissances

GCP IAM

RBAC & IdP integrations

Automation scripting

Terraform automation

Outils

Terraform

Description du poste

Role & responsibilities

Its Contract to Hire Opportunity with LTI Mindtree

• 1 working experience in GCP IAM leadership in largescale enterprise environments
• 2 Must have expertise in designing governing and automating securebydefault access controls across enterprise multiproject organizations
• 3 Architecture Strategy Define enterprise IAM strategies reference architectures RoleBased Access Control RBAC models and personabased access frameworks for human and nonhuman identities
• 4 Policy Governance Enforce leastprivilege principles custom IAM roles and Segregation of Duties SoD across organization folder and project hierarchies
• 5 Advanced Security Controls Implement Workload Identity Federation secure service account lifecycles VPC Service Controls and Access Context Manager guardrails
• 6 Infrastructure as Code IaC Establish policyascode and Terraform standards module patterns safe binding and drift controls integrated into CICD pipelines
• 7 Audit Operations Design compliance logging monitor telemetry via Cloud Audit LogsSecurity Command Center and define operational runbooks or incident playbook
• 8 Leadership Mentorship Lead crossfunctional architecture workshops review designs handle exceptions and mentor cloud security engineers

Core Requirements Skills

• 1 Technical Expertise Deep mastery of GCP resource hierarchy custom roles conditional bindings and enterprise identity provider IdP integrations Active DirectorySAMLOIDC
• 2 Automation Tools Advanced proficiency in Terraform plus scripting or automation via Python Go or Ansible
• 3 Frameworks Compliance Strong working knowledge of securebydesign principles and major regulatory compliance standards.