GCP IAM Lead

About the role

This GCP IAM Lead position is located in Plano, Texas, and requires 5 days of onsite work per week for a duration of 8+ months.

The ideal candidate will have primary skills in GCP, IAM, Terraform, Python, and Java full stack, as well as secondary skills in security, networking (VPC), CI/CD, Gitlab, and GitHub.

Responsibilities

• Own IAM design patterns and delivery for onboarding waves
• Lead engineers and drive secure-by-default identity at scale
• Define IAM reference architectures (RBAC model, service account strategy, privileged access patterns)
• Establish Terraform standards for IAM (module patterns, safe binding strategies, drift controls)
• Lead design reviews, approve exceptions, and partner with security/compliance on control requirements
• Manage delivery across multiple onboarding efforts (prioritization, timelines, dependency management)
• Define operational model: runbooks, access recertification inputs, metrics, and incident response playbooks

Requirements

• Deep GCP IAM leadership experience in enterprise environments
• Proven experience leading multi-team delivery and governing standards/exceptions
• Strong Terraform/IaC governance and security-by-design mindset

Success measures

• Repeatable IAM onboarding patterns adopted broadly
• Reduced onboarding cycle time
• Clean audit outcome