Title: GCP IAM Engineer (Associate)
Role summary: Implement and operate GCP identity and access controls to onboard applications securely and repeatably in a regulated environment.
Key responsibilities
• Provision and manage IAM (roles, bindings, service accounts) across projects using Terraform and Git-based workflows.
• Implement least-privilege patterns for application onboarding (runtime identity, human access, break-glass).
• Support identity integrations and group/role mappings as defined by enterprise standards.
• Produce onboarding evidence (access approvals, deployment records, audit log pointers) and maintain documentation/runbooks.
• Troubleshoot access issues and partner with platform/network/security teams to resolve blockers.
Required qualifications
• Hands-on GCP IAM experience (roles, service accounts, policy inheritance concepts).
• Terraform fundamentals (modules, state basics) and Git/PR workflow discipline.
• Scripting ability (Python) for automation/validation tasks.
• Familiarity with change/release processes and working in controlled environments.
Success measures
• Onboarded apps meet access-control standards with minimal rework; IAM incidents reduced; evidence is audit-ready