IAM Engineer – Google Cloud Platform

Job: IAM Engineer – GCP (Vertex AI) Job ID: DLTJP00053769 / DLTJP00053770

Client: JPMC / Deloitte

Location: Plano, TX (Hybrid)

Job Type: Contract

Job Summary

We are seeking an experienced Identity & Access Management (IAM) Engineer with strong expertise in Google Cloud Platform (GCP) to support the implementation of the GCP Atlas 2.0 Control Plane and Vertex AI platform for a large-scale financial services client.

The ideal candidate will be responsible for designing and implementing secure, scalable IAM solutions, enabling governed access to Google Gemini AI model endpoints while ensuring compliance with enterprise security and regulatory standards.

Key Responsibilities

• Design, implement, and manage IAM solutions within Google Cloud Platform.
• Configure and manage IAM policies for Vertex AI and GCP resources.
• Develop Infrastructure as Code (IaC) using Terraform.
• Automate IAM provisioning, policy validation, and cloud operations using Python.
• Implement Zero Trust security principles and least-privilege access models.
• Secure cloud resources using Cloud KMS, Secret Manager, and enterprise security best practices.
• Configure VPC Service Controls, Shared VPC, Private Service Connect, and network security controls.
• Integrate IAM solutions with CI/CD pipelines and version control systems.
• Monitor cloud environments using Cloud Logging, Cloud Monitoring, and SIEM integrations.
• Collaborate with security, cloud, and infrastructure teams to ensure compliance and governance.

Required Technical Skills

Google Cloud Platform (GCP)

• Strong experience with Google Cloud IAM.
• Hands-on experience with Vertex AI IAM.
• Deep understanding of GCP Resource Hierarchy.
• Experience managing enterprise-scale cloud access controls.

Infrastructure as Code (IaC)

• Advanced Terraform expertise.
• Google & Google-Beta Providers.
• IAM Module Development.
• Remote State Management.
• Workspace & Environment Management.

Python

• Strong automation and scripting skills.
• Google Cloud Client Libraries.
• IAM Policy Automation & Validation.
• API Integration and Orchestration.

Security & Compliance

• Zero Trust Architecture.
• Data Classification & Access Governance.
• Cloud KMS.
• Secret Manager.
• Financial Services Security Standards.
• SOC 2, ISO 27001, PCI-DSS or equivalent compliance frameworks.

Networking & Cloud Security

• VPC Networking.
• Shared VPC.
• Private Google Access.
• VPC Service Controls.
• Cloud Armor.
• Cloud Load Balancing.
• Private Service Connect.

DevOps & Supporting Technologies

• Git (GitHub, GitLab, Bitbucket).
• Jenkins, GitLab CI, Cloud Build.
• OAuth 2.0, OpenID Connect (OIDC), API Security.
• Cloud Logging & Cloud Monitoring.
• SIEM Integration.
• GKE Workload Identity.
• Istio / Anthos Service Mesh.

Preferred Qualifications

• Experience working in large financial services organizations such as JPMC or similar enterprise environments.
• Experience securing AI/ML platforms, including Vertex AI and Google Gemini.
• Strong understanding of enterprise IAM governance, compliance, and cloud security best practices.
• Excellent communication, documentation, and stakeholder management skills.