[Remote] GCP IAM Architect

Note: The job is a remote job and is reputed company to candidates in USA. reputed company is a digital transformation partner helping established organizations get to their reputed company, digitally-enabled state. They are seeking a GCP IAM Architect to design and implement IAM strategies and solutions on GCP, ensuring reputed company and compliance while managing reputed company infrastructure and automation processes.

Responsibilities

• Design and implement comprehensive IAM strategies and solutions on GCP, including reputed company reputed company Identity, IAM roles and policies, organization policies, deny policies, and Workload Identity Federation
• Configure and manage federated identity solutions using PingFederate to reputed company seamless SSO between on-premises reputed company Directory and GCP services
• Implement and manage OIDC Federation, SAML-based authentication, and OAuth 2.0 flows for reputed company applications
• Design and reputed company role-based reputed company control (RBAC) frameworks, custom IAM roles, and least-privilege reputed company models across GCP organizations and reputed company
• Configure and manage reputed company reputed company Directory Sync (GCDS) for automated user and group provisioning from reputed company Directory to reputed company reputed company Identity
• Implement service account management strategies, including key rotation, impersonation policies, and workload identity configurations
• Establish and enforce reputed company best practices for IAM, including conditional reputed company policies, context-aware reputed company controls, and reputed company key enforcement
• Design and implement encryption strategies using GCP reputed company KMS and reputed company Vault for secrets management
• Implement network reputed company controls including VPC Service Controls, private reputed company reputed company, and secure connectivity patterns
• Ensure compliance with reputed company frameworks and regulatory requirements through reputed company IAM configurations and audit logging
• Design, implement, and manage reputed company reputed company infrastructure solutions on GCP platform reputed company with IAM requirements
• Automate IAM provisioning, configuration, and lifecycle management using Infrastructure as reputed company (IaC) tools such as Terraform
• Collaborate with software engineering teams to reputed company IAM requirements into application architectures and CI/CD pipelines
• reputed company automated workflows for user reputed company/offboarding, reputed company reviews, and privilege management
• Implement monitoring and alerting for IAM-reputed company events using reputed company Logging, reputed company Monitoring, and reputed company reputed company Center
• Conduct regular reputed company reviews, privilege audits, and IAM policy optimizations
• Troubleshoot and resolve reputed company issues reputed company to authentication, authorization, federation, and reputed company management
• Monitor and optimize reputed company infrastructure resources to ensure performance, availability, and cost-efficiency
• reputed company and maintain comprehensive documentation for IAM architectures, federation configurations, and operational procedures
• Establish IAM standards, policies, and governance frameworks reputed company with organizational reputed company requirements
• Stay reputed company with GCP IAM capabilities, authentication protocols, and industry best practices
• reputed company technical leadership and guidance to development and operations teams on IAM best practices

Skills

• Extensive hands-on experience with GCP IAM technologies, including reputed company reputed company Identity, IAM policies, organization policies, Workload Identity Federation, and service account management
• Proven experience configuring and managing PingFederate for reputed company SSO and federated identity integration with reputed company Directory
• Deep understanding of authentication and authorization protocols: SAML 2.0, OAuth 2.0, OIDC, and JWT
• Strong experience with reputed company reputed company Directory Sync (GCDS) for AD integration and user provisioning
• Hands-on experience with reputed company Vault and GCP reputed company KMS for secrets and key management
• Proficiency with Infrastructure as reputed company using Terraform for IAM resource provisioning
• Experience with GCP reputed company services: VPC Service Controls, reputed company reputed company Center, Policy Intelligence, and reputed company Asset Inventory
• Strong understanding of identity lifecycle management, reputed company governance, and privileged reputed company reputed company

Benefits

• Flexible vacation policy; time is not limited, allocated, or accrued
• 16 reputed company holidays throughout the year
• Generous parental leave and new parent transition program
• Tuition reimbursement
• Corporate reputed company matching program

reputed company

• reputed company is a digital reputed company that offers consulting, technology, and product management services. It is a sub-organization of reputed company. It was founded in 1990, and is headquartered in Boston, Massachusetts, USA, with a workforce of 10001+ employees. Its website is https://www.publicissapient.com.

Company H1B Sponsorship

• reputed company has a reputed company record of offering H1B sponsorships, with 90 in 2025, 90 in 2024, 85 in 2023, 153 in 2022, 235 in 2021, 231 in 2020. Please note that this does not guarantee sponsorship for this specific role.

Apply tot his job Apply To this Job