GCP IAM Engineer — Terraform & Workload Identity

NexGen Tech Solutions; Plano (TX); In loco; USD 120.000 - 160.000; Tempo pieno

Descrizione del lavoro

NexGen Tech Solutions is seeking a cloud identity engineer to design and implement GCP IAM as code across orgs, folders and projects. You will work with Terraform, establish least-privilege role sets, and align access with policy.

You'll also manage Workforce Identity Federation and Workload Identity Federation, ensuring machine and human identities access GCP via secure token flows, while phasing out static keys.

Competenze

• Strong hands-on Terraform for IAM
• Deep knowledge of GCP IAM policy model and inheritance
• Experience with workforce identity federation
• Experience with workload identity federation
• Lifecycle management of service accounts and keys
• Ability to design reusable role entitlements
• Experience operating CI/CD pipelines for IAM changes

Mansioni

• Design and deliver GCP IAM as code across organisation, folder and project scope.
• Manage entitlements behind Workforce Identity Federation so access is declared in code.
• Wire up Workload Identity Federation for applications and pipelines to use federated tokens.
• Own the service-account lifecycle: naming, provisioning, impersonation, and key elimination.
• Design reusable role models mapping teams to needed access to ensure repeatable permissions.
• Review access requests against least-privilege standards and document decisions.

Conoscenze

Terraform

GCP IAM

Workforce Identity Federation

Workload Identity Federation

Service account lifecycle

Role modeling

CI/CD pipelines

Descrizione del lavoro

NexGen Tech Solutions is seeking a cloud identity engineer to design and implement GCP IAM as code across orgs, folders and projects. You will work with Terraform, establish least-privilege role sets, and align access with policy.

You'll also manage Workforce Identity Federation and Workload Identity Federation, ensuring machine and human identities access GCP via secure token flows, while phasing out static keys.