Want to know if this job is worth applying to?
United States
Remote only
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Sr. Identity Engineer, Google Cloud and DevOps based in the United States.
Join a cloud modernization initiative focused on strengthening identity security and access management across complex enterprise environments.
As a Senior Identity Engineer, you will lead the design, implementation, and support of identity solutions across Google Cloud Platform and DevOps services.
You will take ownership of single sign-on, identity federation, workload authentication, and access protection while helping modernize the organization's cloud platform.
Working with identity, security, cloud, and engineering teams, you will build secure, scalable infrastructure and automated deployment capabilities.
You will also contribute to shared platform services, establish reusable technical standards, and improve operational reliability through infrastructure as code and GitOps practices.
Beyond hands-on engineering, you will document solutions, mentor colleagues, and help application teams develop the skills needed to operate and evolve the platform independently.
You will play a central role in modernizing identity and access management across Google Cloud and DevOps environments, combining hands-on implementation with technical leadership and cross-functional collaboration. Your responsibilities will include:
Design, build, and maintain Google Cloud Platform infrastructure and CI/CD pipelines using Terraform and GitOps, enabling application teams to deploy and manage workloads on Google Kubernetes Engine (GKE).
Own single sign-on (SSO) and identity federation across the platform, integrating enterprise identity providers such as Ping with Google Cloud and tools including GitLab, Artifactory, and HashiCorp Vault through SAML and OIDC.
Implement Google Cloud Workload Identity and Workload Identity Federation to enable secure, keyless authentication for pipelines, microservices, and other workloads accessing Google services.
Manage Google Cloud IAM roles, groups, and least-privilege access models aligned with enterprise identity groups and security requirements.
Maintain HashiCorp Vault integrations supporting secrets management, dynamic credentials, and Public Key Infrastructure (PKI).
Operate and support shared platform services, including GitLab, Artifactory, Vault, and observability tools.
Collaborate with identity, security, cloud, and engineering teams throughout the different implementation phases of the IAM Modernization program.
Develop operational runbooks, reusable technical patterns, and comprehensive documentation to support consistent platform management.
Mentor engineers and share technical expertise to help teams successfully operate, maintain, and improve the solutions being implemented.
Promote secure, scalable, and maintainable engineering practices across the cloud platform.
Requirements:
The ideal candidate is an experienced infrastructure or DevOps engineer with deep expertise in Google Cloud identity management, automation, and enterprise platform engineering. You should bring:
7 to 10+ years of experience in infrastructure, platform, or DevOps engineering, including several years supporting production workloads on Google Cloud Platform and GKE.
Strong hands-on experience with Terraform and the Google Cloud gcloud CLI, with an understanding of infrastructure managed primarily as code rather than through the Google Cloud console.
Experience with Google Cloud Workforce Identity Federation and Google Cloud Directory Sync (GCDS).
Deep knowledge of SAML 2.0 and OAuth, including practical identity provider integration experience with Ping, Okta, Microsoft Entra ID, or similar platforms.
Strong experience managing Google Cloud service accounts and implementing keyless authentication through Workload Identity and Workload Identity Federation.
Scripting proficiency in Python and PowerShell; Bash experience is an advantage.
Hands-on experience with GitOps tools such as Flux or Argo CD, along with Helm.
Experience with HashiCorp Vault, Kubernetes RBAC, and OIDC authentication.
CI/CD expertise using GitLab CI or Jenkins, as well as artifact management with Artifactory.
Familiarity with Prometheus-based monitoring and observability solutions.
Experience working effectively in large enterprise environments with structured governance and change-control processes.
Strong written and verbal communication skills, with the ability to collaborate across technical teams and explain complex concepts clearly.
A proactive and collaborative mindset, with a genuine interest in teaching, mentoring, and supporting the development of other engineers.
Additional experience that would be advantageous includes:
Integrations involving Ping, CyberArk, or ServiceNow.
Experience with cert-manager and external-dns.
Familiarity with Puppet or comparable configuration management tools.
Previous experience in healthcare or another highly regulated industry.
Benefits:
Opportunity to contribute to a strategic IAM modernization program in a complex Google Cloud environment.
Hands-on exposure to cloud infrastructure, identity federation, DevOps automation, and enterprise security technologies.
Opportunity to influence platform architecture, establish reusable engineering practices, and drive technical improvements.
A collaborative environment that encourages continuous learning, technical ownership, mentorship, and professional growth.
Remote work arrangement.
