GCP IAM Engineer
About the role
- Support day-to-day cloud security operations within primarily GCP environments
- Manage Identity & Access Management (IAM) activities, including roles, permissions, access provisioning, and service accounts
- Implement and maintain cloud security controls, policies, and secure configuration standards
- Review cloud environments for security risks, vulnerabilities, misconfigurations, and access concerns
- Help secure cloud infrastructure, workloads, applications, containers, and data services
- Monitor and respond to cloud security findings, alerts, and vulnerabilities
- Support vulnerability remediation and security posture improvement initiatives
- Assist with cloud security incident investigation and root cause analysis
- Support security controls within CI/CD and DevSecOps workflows, including vulnerability scanning, secrets detection, and policy validation
- Partner with application, development, infrastructure, platform, and security teams to resolve security issues and support secure cloud adoption
- Contribute to security automation through scripting, Infrastructure as Code (IaC), and cloud-native tooling
- Support security assessments and compliance activities aligned with frameworks such as NIST and CIS Skills 3+ years of experience in cloud security, cybersecurity, cloud engineering, DevSecOps, or a related technical field
- Strong hands-on experience with Google Cloud Platform (GCP)
- Experience with GCP IAM, including roles, permissions, service accounts, and access management
- Experience supporting cloud security operations, including access requests, security findings, vulnerabilities, and remediation
- Familiarity with DevOps or DevSecOps environments and CI/CD processes
- Familiarity with security frameworks and controls such as NIST, CIS Benchmarks, PCI-DSS, or ISO 27001
- Understanding of cloud infrastructure, networking, identity, data protection, and workload security
- Understanding of security fundamentals including IAM, encryption, logging, vulnerability management, and threat detection
- Strong troubleshooting and problem-solving skills
- Strong communication skills with the ability to work effectively with both technical and business stakeholders
- Ability to work independently, research solutions, and take ownership of assigned security requests and issues Nice to Have: Relevant cloud or security certifications such as Google Professional Cloud Security Engineer, AZ-500, Security+, or equivalent
- Experience with Azure security in addition to GCP
- Experience with cloud security posture management or CNAPP/CSPM technologies
- Experience with scripting or automation using Python, PowerShell, Bash, or similar technologies
- Experience with Infrastructure as Code and security automation
- Exposure to Kubernetes and container security
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.
