Devops Architect

Experience Required

Location

Type

About the Role

Cloud IAM & Security Engineer

Key Responsibilities

• IAM Management

  :
• Design and manage IAM policies, service accounts, custom roles, and bindings in GCP or Azure to enforce

  least-privilege access

  .
• Implement and maintain

  SSO

  ,

  LDAP/AD

  integrations, and

  SAML

  configurations.
• Perform regular

  audits of IAM roles and permissions

  , including deny policies and compliance enforcement.

• KMS & Data Security

  :
• Manage

  Google Cloud KMS

  : key lifecycle, automatic rotation, and integration with storage, compute, and databases.
• Ensure encryption at rest and in transit using best practices and compliance standards.

• Terraform & Infrastructure as Code

  :
• Design and implement

  reusable Terraform modules

  for IAM, KMS, and cloud resource provisioning.
• Maintain version-controlled IaC repositories and enforce secure coding standards.
• Integrate IaC pipelines with

  CI/CD tools

  like GitLab, GitHub Actions, Jenkins, or JFrog.

• Scripting & Automation

  :
• Build automation scripts in

  Python, Bash, or PowerShell

  for IAM and KMS operations, security enforcement, and monitoring.
• Utilize GCP CLI and APIs to streamline identity and resource management.

• CI/CD & Security Compliance

  :
• Set up and maintain CI/CD pipelines with embedded security checks.
• Conduct

  security assessments

  , identify gaps, and implement remediation.
• Provide documentation and

  training to internal teams

  on IAM and cloud security practices.

Required Skills

• 5+ years with

  Cloud IAM

  services (GCP or Azure).
• 5+ years with

  Terraform

  , Cloud Build, and other IaC tools.
• 3+ years of

  security module design and implementation

  in Terraform.
• Hands-on experience with

  Python, Java, or JavaScript

  .
• Strong background in

  Linux/Unix

  , Windows OS, and shell scripting (Bash, PowerShell, Groovy).
• Deep understanding of

  CI/CD pipelines

  , containerization, and orchestration tools (Docker, GKE, AKS).
• Familiarity with

  identity and access governance

  , including PAM, PKI, CNAPP, CWPP, or CSPM is a plus.
• HashiCorp Infrastructure Automation Certification is a bonus.