Sr. Identity Engineer, Google Cloud and DevOps

Accountabilities: You will play a central role in modernizing identity and access management across Google Cloud and DevOps environments, combining hands-on implementation with technical leadership and cross-functional collaboration. Your responsibilities will include: Design, build, and maintain Google Cloud Platform infrastructure and CI/CD pipelines using Terraform and GitOps, enabling application teams to deploy and manage workloads on Google Kubernetes Engine (GKE). Own single sign-on (SSO) and identity federation across the platform, integrating enterprise identity providers such as Ping with Google Cloud and tools including GitLab, Artifactory, and HashiCorp Vault through SAML and OIDC. Implement Google Cloud Workload Identity and Workload Identity Federation to enable secure, keyless authentication for pipelines, microservices, and other workloads accessing Google services. Manage Google Cloud IAM roles, groups, and least-privilege access models aligned with enterprise identity groups and security requirements. Maintain HashiCorp Vault integrations supporting secrets management, dynamic credentials, and Public Key Infrastructure (PKI). Operate and support shared platform services, including GitLab, Artifactory, Vault, and observability tools. Collaborate with identity, security, cloud, and engineering teams throughout the different implementation phases of the IAM Modernization program. Develop operational runbooks, reusable technical patterns, and comprehensive documentation to support consistent platform management. Mentor engineers and share technical expertise to help teams successfully operate, maintain, and improve the solutions being implemented. Promote secure, scalable, and maintainable engineering practices across the cloud platform. Requirements: The ideal candidate is an experienced infrastructure or DevOps engineer with deep expertise in Google Cloud identity management, automation, and enterprise platform engineering. You should bring: 7 to 10+ years of experience in infrastructure, platform, or DevOps engineering, including several years supporting production workloads on Google Cloud Platform and GKE. Strong hands-on experience with Terraform and the Google Cloud gcloud CLI, with an understanding of infrastructure managed primarily as code rather than through the Google Cloud console. Experience with Google Cloud Workforce Identity Federation and Google Cloud Directory Sync (GCDS). Deep knowledge of SAML 2.0 and OAuth, including practical identity provider integration experience with Ping, Okta, Microsoft Entra ID, or similar platforms. Strong experience managing Google Cloud service accounts and implementing keyless authentication through Workload Identity and Workload Identity Federation. Scripting proficiency in Python and PowerShell; Bash experience is an advantage. Hands-on experience with GitOps tools such as Flux or Argo CD, along with Helm. Experience with HashiCorp Vault, Kubernetes RBAC, and OIDC authentication. CI/CD expertise using GitLab CI or Jenkins, as well as artifact management with Artifactory. Familiarity with Prometheus-based monitoring and observability solutions. Experience working effectively in large enterprise environments with structured governance and change-control processes. Strong written and verbal communication skills, with the ability to collaborate across technical teams and explain complex concepts clearly. A proactive and collaborative mindset, with a genuine interest in teaching, mentoring, and supporting the development of other engineers. Additional experience that would be advantageous includes: Integrations involving Ping, CyberArk, or ServiceNow. Experience with cert-manager and external-dns. Familiarity with Puppet or comparable configuration management tools. Previous experience in healthcare or another highly regulated industry. Benefits: Opportunity to contribute to a strategic IAM modernization program in a complex Google Cloud environment. Hands-on exposure to cloud infrastructure, identity federation, DevOps automation, and enterprise security technologies. Opportunity to influence platform architecture, establish reusable engineering practices, and drive technical improvements. A collaborative environment that encourages continuous learning, technical ownership, mentorship, and professional growth. Remote work arrangement. How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether? Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. #LI-CL1