Sr. DevOps Engineer (Google Cloud IAM )

• We are seeking a Google Cloud IAM DevOps Engineer with strong expertise in Identity and Access Management automation on Google Cloud Platform GCP This role focuses on building secure and scalable IAM architectures automating identity lifecycle management and implementing certificate based authentication using X509 certificates

• The ideal candidate will have experience building IAM automation using Terraform GitHub Actions Python and Shell scripting while implementing enterprise grade identity federation and certificate management solutions
  

Key Responsibilities:

Google Cloud IAM Engineering:

• Design and implement secure IAM architectures on Google Cloud

• Manage IAM roles policies and permissions using least privilege principles

• Create and maintain Service Accounts and Service Account key policies

• Implement Workload Identity Pools and Providers for external workloads accessing GCP securely

• Implement Workforce Identity Federation to allow enterprise workforce authentication without service account keys

X509 Certificate Identity Management:

• Design and manage X509 certificate-based authentication systems for workloads and external integrations

• Implement certificate lifecycle management including issuance rotation and revocation

• Automate certificate provisioning and renewal processes

• Integrate certificate authentication with identity federation and secure workload authentication

Infrastructure as Code DevOps:

• Develop reusable Terraform modules to automate IAM and identity federation infrastructure

• Implement GitHub Actions pipelines to deploy and manage IAM configurations

• Maintain automated pipelines for IAM resource provisioning

Automation Scripting:

Develop automation tools using

• Python

• Shell scripting

Use scripting to automate:

• IAM role audits

• Service account lifecycle management

• Certificate provisioning and rotation
  

Required Skills:

Google Cloud:

Strong hands-on experience with

• Google Cloud IAM

• Service Accounts

• Workload Identity Pools

• Workload Identity Federation

• Workforce Identity Federation

• DevOps Infrastructure as Code

Terraform:

• Module development

• IAM resource automation

• Infrastructure lifecycle management

GitHub Actions:

• CICD pipeline creation

• Infrastructure deployment automation

Programming Automation:

• Python

• Shell scripting Bash

Security Identity:

• Identity federation OIDC SAML

• X509 certificate management

• Certificate lifecycle management

• Secure authentication architectures

• Least privilege access models
  

Preferred Qualifications:

• Experience integrating with enterprise identity providers Okta Azure AD Ping etc

• Familiarity with PKI infrastructure and certificate authorities

• Experience building IAM automation platforms at enterprise scale

• Experience implementing certificate-based workload authentication
  

What You'll Work On:

• Enterprise scale Google Cloud IAM automation

• Identity federation platforms

• X509 certificate-based authentication solutions

• Secure CICD pipelines for cloud identity provisioning

• Infrastructure as Code driven IAM governance
  

The pay range that the employer in good faith reasonably expects to pay for this position is $43.92/hour - $68.62/hour. Our benefits include medical, dental, vision and retirement benefits. Applications will be accepted on an ongoing basis.

Tundra Technical Solutions is among North America’s leading providers of Staffing and Consulting Services. Our success and our clients’ success are built on a foundation of service excellence. We are an equal opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, sex, sexual orientation, age, veteran status, disability, genetic information, or other applicable legally protected characteristic. Qualified applicants with arrest or conviction records will be considered for employment in accordance with applicable law, including the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Unincorporated LA County workers: we reasonably believe that criminal history may have a direct, adverse and negative relationship with the following job duties, potentially resulting in the withdrawal of a conditional offer of employment: client provided property, including hardware (both of which may include data) entrusted to you from theft, loss or damage; return all portable client computer hardware in your possession (including the data contained therein) upon completion of the assignment, and; maintain the confidentiality of client proprietary, confidential, or non-public information. In addition, job duties require access to secure and protected client information technology systems and related data security obligations.

Salary : $44 - $69