Senior Engineer, DevSecOps & GCP IAM

As a Senior Engineer in InfoSec Engineering at TransUnion, you will play a crucial role in ensuring the security and scalability of our infrastructure by focusing on DevSecOps, Infrastructure as Code (IaC), and cloud-native security, particularly on Google Cloud Platform (GCP). Your expertise in GCP IAM, Terraform, Python, and CI/CD pipelines using tools like Harness will be essential for building secure, scalable, and automated infrastructure and identity solutions. Key Responsibilities: - Design and implement DevSecOps pipelines with integrated security controls throughout the SDLC. - Develop and manage Infrastructure as Code using Terraform, specifically focusing on GCP resource provisioning and IAM policies. - Build and maintain CI/CD pipelines using tools like Harness, GitLab CI, or similar platforms. - Implement and manage GCP IAM roles, policies, service accounts, and organization-level security controls. - Integrate and provide support for IAM solutions such as SailPoint, Ping Identity, and Privileged Access Management (PAM) tools. - Collaborate with security teams to enforce least privilege access, identity federation, and automate compliance. - Monitor infrastructure and application security posture utilizing GCP-native tools like Security Command Center and Cloud Audit Logs. - Automate security testing and compliance checks within CI/CD workflows. - Maintain documentation for infrastructure, IAM configurations, and security procedures. Required Skills & Qualifications: - Bachelor's degree in Computer Science, Engineering, or a related field. - 5+ years of experience in DevOps, DevSecOps, or Cloud Security Engineering roles. - Strong hands-on experience with GCP IAM, Terraform, and Python. - Proficiency in building and managing CI/CD pipelines, with preferred experience in Harness. - Familiarity with IAM platforms such as SailPoint, Ping Identity, and PAM tools. - Solid understanding of cloud security best practices, identity lifecycle management, and compliance frameworks. - Experience with containerization (Docker, Kubernetes) and monitoring tools like Prometheus and Grafana. Preferred Qualifications: - GCP certifications like Professional Cloud Security Engineer or Cloud DevOps Engineer. - Experience with GitOps, policy-as-code (e.g., OPA), and security automation. - Exposure to multi-cloud IAM strategies and federated identity management. This hybrid position requires you to perform job responsibilities both virtually and in-person at a designated TransUnion office location for a minimum of two days a week.,