GCP IAM Lead

• Define and govern GCP IAM reference architectures, including:
• RBAC models
• Service account strategy
• Privileged access patterns
• Secure identity and access controls
• Establish Terraform/IaC standards for IAM, including reusable module patterns, secure IAM bindings, and drift controls.
• Lead IAM design and architecture reviews and approve or govern security exceptions.
• Partner with Security, Risk, and Compliance teams to translate control requirements into IAM solutions.
• Lead delivery across multiple IAM onboarding initiatives, managing priorities, timelines, dependencies, and engineering teams.
• Define the IAM operational model, including runbooks, access recertification inputs, metrics, monitoring, and incident-response playbooks.
• Drive adoption of repeatable, standardized IAM onboarding patterns across the enterprise.
• Promote a security-by-design approach to cloud identity and access management.

• Deep hands-on and leadership experience with GCP IAM in enterprise environments.
• Strong knowledge of GCP IAM, RBAC, service accounts, privileged access, roles, policies, and access controls.
• Strong Terraform / Infrastructure-as-Code experience, specifically for IAM governance and secure deployment.
• Proven experience leading multi-team / enterprise IAM delivery.
• Experience establishing and governing architecture standards, design patterns, and exceptions.
• Strong understanding of cloud security and security-by-design principles.
• Experience working with Security, Risk, Compliance, and Audit teams.
• Strong experience with IAM onboarding, governance, operational processes, and access controls.
• Excellent technical leadership, architecture review, stakeholder management, and communication skills.

Preferred Experience

• Enterprise-scale GCP migration or onboarding programs.
• IAM automation and reusable Terraform modules.
• Access reviews / recertification and audit readiness.
• IAM monitoring, metrics, incident response, and operational governance.

Success Measures

• Broad adoption of repeatable GCP IAM onboarding patterns.
• Reduced IAM onboarding cycle time.
• Strong governance and security controls.
• Clean and consistent audit outcomes.
• Reduced IAM configuration drift and security exceptions.

• Dental insurance
• Health insurance
• Vision insurance

AgreeYa is a global Systems Integrator and is seeking an experienced GCP IAM Lead to join our growing team. We are looking for a GCP IAM Architect / IAM Lead to own IAM architecture, design patterns, governance, and delivery for enterprise onboarding initiatives. The role will lead engineers, establish secure-by-default identity standards, and drive scalable IAM solutions across multiple teams., AgreeYa is a global systems integrator delivering competitive advantage for its customers through software, solutions, and services. Established in 1999, AgreeYa is headquartered in Folsom, California, with a global footprint and a team of more than 2,200 staff across offices. AgreeYa works with 500+ organizations ranging from Fortune 100 firms to small and large businesses across industries such as Telecom, Banking, Financial Services & Insurance, Healthcare, Utility & Energy, Technology, Public sector, Pharma & Biotech, and others. Please visit us at www.agreeya.com for more information.