GCP IAM Engineer

Title: GCP IAM Engineer (Associate) Role summary: Implement and operate GCP identity and access controls to onboard applications securely and repeatably in a regulated environment. Key responsibilities • Provision and manage IAM (roles, bindings, service accounts) across projects using Terraform and Git-based workflows. • Implement least-privilege patterns for application onboarding (runtime identity, human access, break-glass). • Support identity integrations and group/role mappings as defined by enterprise standards. • Produce onboarding evidence (access approvals, deployment records, audit log pointers) and maintain documentation/runbooks. • Troubleshoot access issues and partner with platform/network/security teams to resolve blockers. Required qualifications • Hands-on GCP IAM experience (roles, service accounts, policy inheritance concepts). • Terraform fundamentals (modules, state basics) and Git/PR workflow discipline. • Scripting ability (Python) for automation/validation tasks. • Familiarity with change/release processes and working in controlled environments. Success measures • Onboarded apps meet access-control standards with minimal rework; IAM incidents reduced; evidence is audit-ready