Senior Identity Engineer, Google Cloud and DevOps
New
J
JobgetherCloud identity security
Based in the United StatesFull-TimeSenior
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Experience
- 7 to 10+ years of experience in infrastructure, platform, or DevOps engineering, including several years supporting production workloads on Google Cloud Platform and GKE.
- Required Skills
- PythonGCPOAuthTerraform
Requirements
- Have 7 to 10+ years of infrastructure, platform, or DevOps engineering experience, including several years supporting production workloads on Google Cloud Platform and GKE.
- Bring hands-on Terraform experience and proficiency with the Google Cloud gcloud CLI.
- Have experience with Google Cloud Workforce Identity Federation and Google Cloud Directory Sync (GCDS).
- Know SAML 2.0 and OAuth and have practical identity provider integration experience with Ping, Okta, Microsoft Entra ID, or similar platforms.
- Have experience managing Google Cloud service accounts and implementing Workload Identity and Workload Identity Federation.
- Have scripting proficiency in Python and PowerShell; Bash experience is advantageous.
- Have hands-on experience with GitOps tools such as Flux or Argo CD, and Helm.
- Have experience with HashiCorp Vault, Kubernetes RBAC, and OIDC authentication.
- Have CI/CD experience with GitLab CI or Jenkins and artifact management with Artifactory.
- Be familiar with Prometheus-based monitoring and observability solutions.
- Have experience working in large enterprise environments with structured governance and change-control processes.
- Additional advantageous experience includes Ping, CyberArk, or ServiceNow integrations; cert-manager; external-dns; Puppet or comparable configuration management tools; or work in healthcare or another highly regulated industry.
Responsibilities
- Design, build, and maintain Google Cloud Platform infrastructure and CI/CD pipelines using Terraform and GitOps.
- Enable application teams to deploy and manage workloads on Google Kubernetes Engine.
- Own SSO and identity federation across the platform, integrating enterprise identity providers and tools through SAML and OIDC.
- Implement Google Cloud Workload Identity and Workload Identity Federation for secure, keyless workload authentication.
- Manage Google Cloud IAM roles, groups, and least-privilege access models.
- Maintain HashiCorp Vault integrations for secrets management, dynamic credentials, and PKI.
- Operate and support shared platform services, including GitLab, Artifactory, Vault, and observability tools.
- Develop operational runbooks, reusable technical patterns, and platform documentation.
- Mentor engineers and collaborate with identity, security, cloud, and engineering teams.
View Full Description & ApplyYou'll be redirected to the employer's site
