GCP IAM Architect: Federation, RBAC & Secrets

Publicis Sapient; Boston (MA); On-site; USD 150,000 - 195,000; Full time

Benefits offered by this job

Flexible vacation policy

16 paid holidays

Generous parental leave

Corporate gift matching program

Job summary

A digital transformation partner is seeking a skilled IAM Engineer to design and implement IAM strategies on GCP. Responsibilities include configuring federated identity solutions, managing OIDC Federation, and establishing security best practices. The candidate must have extensive experience with GCP IAM technologies, including Google Cloud Identity and PingFederate. The position offers a competitive salary range of $150,000 - $195,000 and flexible vacation policies among other benefits.

Qualifications

• Extensive hands-on experience with GCP IAM technologies.
• Proven experience configuring and managing PingFederate for enterprise SSO.
• Deep understanding of authentication and authorization protocols.
• Strong experience with Google Cloud Directory Sync (GCDS).
• Hands-on experience with Hashicorp Vault and GCP Cloud KMS.
• Proficiency with Infrastructure as Code using Terraform.
• Experience with GCP security services.
• Strong understanding of identity lifecycle management.

Responsibilities

• Design and implement comprehensive IAM strategies on GCP.
• Configure federated identity solutions using PingFederate.
• Implement OIDC Federation and SAML-based authentication.
• Design and deploy RBAC frameworks across GCP.
• Establish security best practices for IAM.
• Automate IAM provisioning using IaC tools like Terraform.
• Collaborate with software engineering teams on IAM integration.
• Implement monitoring and alerting for IAM-related events.

Skills

GCP IAM technologies

PingFederate

SAML 2.0, OAuth 2.0, OIDC, JWT

Google Cloud Directory Sync (GCDS)

Hashicorp Vault

Terraform

GCP security services

Identity lifecycle management

Job description

A digital transformation partner is seeking a skilled IAM Engineer to design and implement IAM strategies on GCP. Responsibilities include configuring federated identity solutions, managing OIDC Federation, and establishing security best practices. The candidate must have extensive experience with GCP IAM technologies, including Google Cloud Identity and PingFederate. The position offers a competitive salary range of $150,000 - $195,000 and flexible vacation policies among other benefits.