GCP IAM Architect

Publicis Sapient; Atlanta (GA); On-site; USD 150,000 - 195,000; Full time

Benefits offered by this job

Flexible vacation policy

16 paid holidays

Generous parental leave

Corporate gift matching program

Job summary

A leading tech consulting firm located in Atlanta, Georgia is seeking a highly skilled IAM Specialist. This role involves designing and implementing comprehensive IAM strategies and solutions on Google Cloud Platform. The ideal candidate has extensive experience with GCP IAM technologies, including Google Cloud Identity and PingFederate for enterprise SSO integration. You will ensure security best practices and manage user provisioning using Terraform for automation. Competitive pay and flexible benefits are offered.

Qualifications

• Extensive hands-on experience with GCP IAM technologies including Google Cloud Identity.
• Proven experience configuring and managing PingFederate for enterprise SSO.
• Deep understanding of authentication protocols: SAML 2.0, OAuth 2.0, OIDC.
• Strong experience with Google Cloud Directory Sync (GCDS) for AD integration.
• Hands-on experience with Hashicorp Vault for secrets management.
• Proficiency with Infrastructure as Code using Terraform.

Responsibilities

• Design and implement IAM strategies and solutions on GCP.
• Implement and manage OIDC Federation and OAuth 2.0 flows.
• Configure and manage federated identity solutions using PingFederate.
• Establish and enforce security best practices for IAM.
• Automate IAM provisioning and lifecycle management using IaC tools.

Skills

GCP IAM technologies

PingFederate

SAML 2.0

OAuth 2.0

OIDC

JWT

Google Cloud Directory Sync

Hashicorp Vault

Terraform

Job description

• Design and implement comprehensive IAM strategies and solutions on GCP, including Google Cloud Identity, IAM roles and policies, organization policies, deny policies, and Workload Identity Federation
• Configure and manage federated identity solutions using PingFederate to enable seamless SSO between on-premises Active Directory and GCP services
• Implement and manage OIDC Federation, SAML-based authentication, and OAuth 2.0 flows for enterprise applications
• Design and deploy role-based access control (RBAC) frameworks, custom IAM roles, and least-privilege access models across GCP organizations and projects
• Configure and manage Google Cloud Directory Sync (GCDS) for automated user and group provisioning from Active Directory to Google Cloud Identity
• Implement service account management strategies, including key rotation, impersonation policies, and workload identity configurations

Security & Compliance:

• Establish and enforce security best practices for IAM, including conditional access policies, context-aware access controls, and security key enforcement
• Design and implement encryption strategies using GCP Cloud KMS and Hashicorp Vault for secrets management
• Implement network security controls including VPC Service Controls, private Google access, and secure connectivity patterns
• Ensure compliance with security frameworks and regulatory requirements through proper IAM configurations and audit logging
• Design, implement, and manage scalable cloud infrastructure solutions on GCP platform aligned with IAM requirements
• Automate IAM provisioning, configuration, and lifecycle management using Infrastructure as Code (IaC) tools such as Terraform
• Collaborate with software engineering teams to integrate IAM requirements into application architectures and CI/CD pipelines
• Develop automated workflows for user onboarding/offboarding, access reviews, and privilege management

Monitoring & Optimization:

• Implement monitoring and alerting for IAM-related events using Cloud Logging, Cloud Monitoring, and Security Command Center
• Conduct regular access reviews, privilege audits, and IAM policy optimizations
• Troubleshoot and resolve complex issues related to authentication, authorization, federation, and access management
• Monitor and optimize cloud infrastructure resources to ensure performance, availability, and cost-efficiency

Documentation & Governance:

• Develop and maintain comprehensive documentation for IAM architectures, federation configurations, and operational procedures
• Establish IAM standards, policies, and governance frameworks aligned with organizational security requirements
• Stay current with GCP IAM capabilities, authentication protocols, and industry best practices
• Provide technical leadership and guidance to development and operations teams on IAM best practices

Required Skills & Experience:

• Extensive hands‑on experience with GCP IAM technologies, including Google Cloud Identity, IAM policies, organization policies, Workload Identity Federation, and service account management
• Proven experience configuring and managing PingFederate for enterprise SSO and federated identity integration with Active Directory
• Deep understanding of authentication and authorization protocols: SAML 2.0, OAuth 2.0, OIDC, and JWT
• Strong experience with Google Cloud Directory Sync (GCDS) for AD integration and user provisioning
• Hands‑on experience with Hashicorp Vault and GCP Cloud KMS for secrets and key management
• Proficiency with Infrastructure as Code using Terraform for IAM resource provisioning
• Experience with GCP security services: VPC Service Controls, Security Command Center, Policy Intelligence, and Cloud Asset Inventory
• Strong understanding of identity lifecycle management, access governance, and privileged access management concepts

Additional Information

Benefits of Working Here

• Flexible vacation policy; time is not limited, allocated, or accrued
• 16 paid holidays throughout the year
• Generous parental leave and new parent transition program
• Corporate gift matching program

Pay Range: $150,000 - $195,000

The range shown represents a grouping of relevant ranges currently in use at Publicis Sapient. Actual range for this position may differ, depending on location and specific skillset required for the work itself.

As part of our dedication to an inclusive and diverse workforce, Publicis Sapient is committed to Equal Employment Opportunity without regard for race, color, national origin, ethnicity, gender, protected veteran status, disability, sexual orientation, gender identity, or religion. We are also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, you may contact us [e-mail] or you may call us at [phone].

Your information will be kept confidential according to EEO guidelines.