GCP IAM Security Engineer

Capgemini - New York, NY

Full-time - Mid Level

New York, NY

10,001+ employees

Professional, Scientific, and Technical Services

About the position

The GCP IAM Security Engineer at Capgemini is responsible for enhancing identity and access management (IAM) practices within Google Cloud Platform (GCP). This role involves implementing and managing secure IAM solutions to ensure compliance with security standards and best practices, thereby safeguarding the cloud environment.

Responsibilities

• Design, configure, and maintain IAM policies and roles within GCP to ensure secure access to cloud resources.
• Oversee user provisioning, de-provisioning, and access rights management, ensuring adherence to the principle of least privilege.
• Conduct regular audits and assessments of IAM configurations, identifying and mitigating security risks.
• Implement monitoring solutions to track IAM-related activities and generate reports on access permissions and security incidents.
• Collaborate with incident response teams to investigate IAM-related security incidents, providing timely remediation and reporting.
• Develop and enforce IAM policies and procedures that align with industry standards and regulatory requirements.
• Work closely with DevOps, security, and application teams to integrate IAM solutions into CI/CD pipelines and application deployments.
• Provide guidance and training to team members on IAM best practices and emerging security threats.

Requirements

• 7 to 10 years of relevant experience in IAM and security roles.
• 1 to 3 years of experience with Google Cloud Security.
• 1 to 3 years of experience in IAM - Access Management.
• Strong understanding of GCP IAM features, including service accounts, roles, and permissions.
• Experience with identity governance and compliance standards (e.g., NIST, ISO 27001).
• Familiarity with cloud security tools and technologies.
• Excellent analytical and problem-solving skills.
• Strong communication and interpersonal skills to work effectively with cross-functional teams.
• Certifications (preferred): Google Cloud Professional Cloud Security Engineer, CISSP, or relevant certifications.

Nice-to-haves

• Experience with cloud security best practices and frameworks.
• Knowledge of DevOps practices and CI/CD pipelines.

Benefits

• Flexible work
• Healthcare including dental, vision, mental health, and well-being programs
• Financial well-being programs such as 401(k) and Employee Share Ownership Plan
• Paid time off and paid holidays
• Paid parental leave
• Family building benefits like adoption assistance, surrogacy, and cryopreservation
• Social well-being benefits like subsidized back-up child/elder care and tutoring
• Mentoring, coaching and learning programs
• Employee Resource Groups
• Disaster Relief