IAM Engineer (GCP)

LA VISEE TECHNOLOGIES LLC

Dallas, TX, United States

3 months ago

Role details

Contract type

Permanent contract

Employment type

Full-time (> 32 hours)

Compensation

$114,400.0

Working hours

Regular working hours

Job source

indeed.com

Tech stack

Kubernetes Security Application Programming Interfaces (APIs) Artificial Intelligence Cloud Computing Github Identity and Access Management Python (Programming Language) Key Management Network Security Network Control OAuth OpenID

+21 more

PCI Data Security Standards Zero Trust Network Access Security Information and Event Management Data Logging Scripting Google Cloud Software Modules Data Classification Cloud Monitoring Istio Software Security Build Server Amazon Virtual Private Cloud (VPC) Gitlab Git Gitlab-ci Bitbucket Firewall Services Module Terraform Software Version Control Jenkins

Job description

Seeking an experienced IAM (Identity and Access Management) Specialist/Engineer to support the implementation of GCP Atlas 2.0 Control Plane and Vertex AI enablement for a large-scale financial services client. This role will be critical in establishing secure, governed access to Google Gemini AI model endpoints while maintaining strict compliance with enterprise security standards.

Requirements

Do you have experience in Terraform?, * Deep experience with Google Cloud IAM

GCP Vertex AI IAM
Resource hierarchy

Infrastructure as Code

Terraform - Advanced proficiency:
GCP provider expertise (google, google-beta)
IAM module development
State management and remote backends
Workspace and environment management
Python - Strong scripting skills for automation:
Google Cloud Client Libraries
IAM policy manipulation and validation
API integration and orchestration

Security & Compliance

Strong understanding of zero-trust architecture principles
Experience with data classification and sensitivity-based access controls
Knowledge of financial services compliance requirements (ideally experience with JPMC or similar enterprises)
Familiarity with SOC 2, ISO 27001, PCI-DSS or similar frameworks
Understanding of encryption, key management (Cloud KMS), and secrets management (Secret Manager)

Networking & Security Controls

Understanding of VPC networking and its intersection with IAM (private Google access, shared VPC)
Experience with VPC Service Controls and security perimeters
Knowledge of firewall rules, Cloud Armor, and Cloud Load Balancing as they relate to access control
Familiarity with PrivateLink/Private Service Connect patterns

Supporting Technical Skills

Git/version control - experience with GitLab, GitHub, or Bitbucket
CI/CD pipelines - Jenkins, GitLab CI, Cloud Build, or similar
API security - OAuth 2.0, OIDC, API keys, and token management
Logging and monitoring - Cloud Logging, Cloud Monitoring, integration with SIEM tools
Container security - GKE workload identity, service mesh authentication (Istio/Anthos Service Mesh)