Capgemini—GCP IAM Specialist - Cloud-Native Development

Job description

Description: Choosing Capgemini means choosing a company where you will be empowered to shape your career in the way you’d like, where you’ll be supported and inspired by a collaborative community of colleagues around the world, and where you’ll be able to reimagine what’s possible. Join us and help the world’s leading organizations unlock the value of technology and build a more sustainable, more inclusive world. Your RoleWe are seeking a highly skilled GCP IAM Specialist with Min. Total 9 Years of technical experience with strong cloud-native development expertise to design, implement, and govern identity and access management frameworks across our Google Cloud Platform estate. This role is pivotal in ensuring secure, compliant, and scalable access controls while driving cloud-native application delivery.Key Responsibilities:Design and enforce IAM policies, roles, and permission boundaries across GCP projects, folders, and organizationsDevelop and maintain custom IAM roles aligned to least-privilege principles across multi-project GCP environmentsBuild and maintain cloud-native applications and automation tooling using GCP-native services (Cloud Run, Cloud Functions, Pub/Sub, GCS)Implement Workload Identity Federation and service account management best practicesIntegrate IAM controls with CI/CD pipelines and enforce policy-as-code using TerraformConduct IAM access reviews, audit log analysis via Cloud Audit Logs and Security Command CenterCollaborate with development and platform teams to embed security controls into cloud-native deliveryDefine and maintain organization-level IAM guardrails using VPC Service Controls and Access Context ManagerDrive IAM automation using Ansible playbooks for configuration management and drift detectionProvide technical guidance and IAM governance frameworks to delivery teamsYour Profile5+ years of hands-on experience with GCP IAM, including custom roles and policy managementStrong proficiency in GCP-native development (Cloud Run, Cloud Functions, App Engine, Pub/Sub)Solid Terraform experience for IAM policy provisioning and infrastructure-as-codeExperience with Workload Identity, service accounts, and federated identity managementProficiency in Python or Go for automation and tooling developmentFamiliarity with GCP Security Command Center, Cloud Audit Logs, and compliance frameworksExperience implementing VPC Service Controls and organization policiesUnderstanding of OAuth 2.0, OIDC, and SAML integration patterns on GCPWhat you'll love about working hereYou can shape your career with us. We offer a range of career paths and internal opportunities within Capgemini group. You will also get personalized career guidance from our leaders.You will get comprehensive wellness benefits including health checks, telemedicine, insurance with top-ups, elder care, partner coverage or new parent support via flexible work.At Capgemini, you can work on cutting-edge projects in tech and engineering with industry leaders or create solutions to overcome societal and environmental challenges.Capgemini is an AI-powered global business and technology transformation partner, delivering tangible business value. We imagine the future of organizations and make it real with AI, technology and people. With our strong heritage of nearly 60 years, we are a responsible and diverse group of 420,000 team members in more than 50 countries. We deliver end-to-end services and solutions with our deep industry expertise and strong partner ecosystem, leveraging our capabilities across strategy, technology, design, engineering and business operations. The Group reported 2024 global revenues of €22.1 billion.Make it real | www.capgemini.com