Cloud Engineer (Google Cloud)

NexGen Tech Solutions • Full-time • Plano, TX, US • 7h ago

What you’ll do

Design and deliver GCP IAM as code — role bindings, custom roles and least-privilege role sets across organisation, folder and project scope — authored in Terraform, peer-reviewed and applied by pipeline.
Manage the entitlements behind Workforce Identity Federation, so enterprise users reach GCP through the firm’s identity provider with their access declared in code rather than granted by hand.
Wire up Workload Identity Federation for applications and pipelines — binding federated principals onto service accounts so a workload exchanges a token for GCP access instead of holding a key.
Own the service-account lifecycle: naming, provisioning, ownership, impersonation, and the elimination of static keys.
Design the role model— the reusable sets of entitlements that map a team or persona to the access it actually needs, so access is repeatable and reviewable instead of bespoke.
Review access requests against a least-privilege standard: establish what a role genuinely grants, find the tightest role that meets the stated need, and record the decision.

What we’re looking for

Required

Strong hands-on Terraform — authoring, reviewing and shipping IAM through modules and CI/CD.
Strong hands-on GCP IAM — the policy model, inheritance across organisation, folder and project, and the practical difference between predefined and custom roles.
Real depth on roles and permissions: able to work out what a role actually confers, spot an over-grant, and substitute a narrower role without breaking the use case.
Ability to understand Workforce Identity Federation and Workload Identity Federation — how human access federates into GCP from an enterprise identity provider, and how a machine identity exchanges a federated token for GCP access instead of holding a key.

Nice to have

IAM deny policies.
IAM Conditions — conditional role bindings.
Experience removing service-account keys at scale, or running a keyless migration.
Custom role design and the governance around it.
Experience operating in large regulated enterprise environments.

Related Jobs

DevOps & Data Pipeline Engineer

Tata Consultancy Services • Full-time • Plano, TX, US • 9h ago

Cloud Engineer

9h ago

Cloud Platform Engineer

Brown & Brown • Full-time • Plano, TX, US • 2d ago

Cloud Engineer

2d ago

Cloud Engineer

Crestron Electronics • Full-time • Plano, TX, US • 3d ago

Cloud Engineer

3d ago

Senior Cloud Systems Engineer

Fiserv • Full-time • Frisco, TX, US • 4d ago

Cloud Engineer

4d ago

Principal Engineer, Cloud

CarMax • Full-time • Plano, TX, US • 4d ago

Cloud Engineer

4d ago

Lead Azure Cloud & DevOps Platform Engineer

AT&T • Full-time • Plano, TX, US • 5d ago

Cloud Engineer

5d ago

Platform Engineer

T-Mobile • Full-time • Frisco, TX, US • 5d ago

Cloud Engineer

5d ago

Senior Azure DevOps Engineer

Luxoft • Full-time • Plano, TX, US • 6d ago

Cloud Engineer

6d ago

Platform Engineer

Peak to Creek Precision Staffing • Full-time • Richardson, TX, US • 6d ago

Cloud Engineer

6d ago

DevOps Engineer

Virtusa • Full-time • Plano, TX, US • 1w ago

Cloud Engineer

1w ago