Cloud IAM Engineer

We are seeking a highly skilled Cloud IAM Engineer to join our Enterprise Information Security Team at CVS Health. The ideal candidate will design, develop, automate, and test Identity and Access Management (IAM) procedures, focusing on provisioning role-based access within Google Cloud Platform (GCP).

In this hands-on role, you will collaborate closely with the infrastructure technology and application development teams to ensure secure and efficient cloud access for job functions across the organization. You will be responsible for the design and automation of GCP IAM solutions to optimize security and access controls.

Key Responsibilities:

• Design, develop, and automate IAM solutions to provision role-based access in GCP, ensuring security best practices are followed.
• Manage and maintain GCP IAM roles, policies, and federations, focusing on access control and RBAC (Role-Based Access Control).
• Implement Service Account Impersonation & Workload Identity Federation to enhance security in GCP environments.
• Oversee GCP service accounts, manage access tokens, and apply related security controls.
• Collaborate with teams to resolve IAM issues, managing access levels across a GCP organization.
• Automate IAM processes for groups and service accounts using tools like Terraform and Python.
• Troubleshoot and resolve IAM-related challenges, providing cloud access solutions while maintaining a strong security posture.

Required Qualifications:

• 6+ years of experience in the IT/Cloud field.
• 3+ years of experience with Google Cloud Platform (GCP).
• Deep expertise in Google Cloud security fundamentals, including IAM policies and security controls.
• Strong hands-on experience with GCP CLI, Terraform, and Python coding for automation.
• Proficiency in managing IAM roles, policies, and federations within GCP.
• Expertise in managing GCP Service Accounts, Access Tokens, and related security controls.
• Ability to troubleshoot IAM issues and access levels across a GCP organization.
• Understanding of the IAM hierarchy in GCP and its impact on security management.
• A customer-service mindset with the ability to provide solutions to IAM challenges.