In this role, you will join Client's Cloud Platform team and help modernize identity and access management across the cloud platform. You will lead identity and access protection for Google Cloud and DevOps services, own single sign-on and federation across the platform, and help engineers develop the skills and patterns needed to support the solutions you build.
- Design, build, and support Google Cloud Platform infrastructure and CI/CD pipelines using Terraform and GitOps, enabling application teams to deploy and manage workloads on Google Kubernetes Engine (GKE).
- Own single sign-on and federation across the platform, connecting the enterprise identity provider, such as Ping, with Google Cloud and platforms including GitLab, Artifactory, and HashiCorp Vault using SAML and OIDC.
- Implement Google Cloud Workload Identity and Workload Identity Federation so pipelines and microservices can securely access Google services without relying on long-lived keys.
- Manage GCP IAM roles, groups, and least-privilege access patterns mapped to enterprise identity groups.
- Maintain HashiCorp Vault integrations supporting secrets management, dynamic credentials, and PKI.
- Nice to have: CyberArk
- Nice to have: ServiceNow
- Nice to have: cert-manager
- Nice to have: external-dns
- Nice to have: Puppet
Sr. Identity Engineer, Google Cloud and DevOpsVailexa