Senior Identity Engineer, Google Cloud – DevOps

This is a fully remote position, open to applicants in Texas.

📋 Description

• Design, develop, and maintain infrastructure on Google Cloud Platform and CI/CD pipelines utilizing Terraform and GitOps.

• Empower application teams to deploy and manage workloads using Google Kubernetes Engine.

• Take ownership of single sign-on and federation across the platform, integrating the enterprise identity provider with Google Cloud, GitLab, Artifactory, and HashiCorp Vault through SAML and OIDC.

• Implement Google Cloud Workload Identity and Workload Identity Federation to facilitate secure keyless access.

• Oversee GCP IAM roles, groups, and enforce least-privilege access practices.

• Maintain integrations with HashiCorp Vault for secrets management, dynamic credentials, and PKI.

• Operate and support shared platform services, including GitLab, Artifactory, Vault, and the observability stack.

• Collaborate with identity, security, cloud, and engineering teams during the implementation phases of IAM Modernization.

• Create runbooks and reusable technical patterns, document solutions, and provide mentorship to engineers.

⛳️ Requirements

• 7 to 10+ years of experience in infrastructure, platform, or DevOps engineering, with several years dedicated to supporting production workloads on Google Cloud Platform and GKE.

• Strong practical experience with Terraform and the gcloud CLI.

• Familiarity with Google Cloud Workforce Identity Federation and Google Cloud Directory Sync (GCDS).

• In-depth understanding of SAML 2.0 and OAuth, including hands-on experience integrating identity providers such as Ping, Okta, Microsoft Entra ID, or similar platforms.

• Robust experience in managing Google Cloud service accounts, including keyless authentication via Workload Identity and Workload Identity Federation.

• Proficiency in scripting with Python and PowerShell.

• Practical GitOps experience employing Flux or Argo CD, along with Helm.

• Familiarity with HashiCorp Vault, Kubernetes RBAC, and OIDC authentication.

• CI/CD experience utilizing GitLab CI or Jenkins, and managing artifacts with Artifactory.

• Experience with Prometheus-based monitoring and observability solutions.

• Proven ability to operate effectively within a large, change-managed enterprise environment.

• Excellent written and verbal communication skills, a collaborative mindset, and a commitment to mentoring fellow engineers.

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Comprehensive health, dental, and vision insurance.

• Flexible work hours and the option for remote work.

• Opportunities for professional development and continuous learning.

• Generous vacation and paid time off policies.