Description

Strong hands-on Terraform — authoring, reviewing and shipping IAM through modules and CI/CD.

Strong hands-on GCP IAM — the policy model, inheritance across organisation, folder and project, and

the practical difference between predefined and custom roles.

Real depth on roles and permissions: able to work out what a role actually confers, spot an over-grant,

and substitute a narrower role without breaking the use case.

Ability to understand Workforce Identity Federation and Workload Identity Federation — how human

access federates into GCP from an enterprise identity provider, and how a machine identity exchanges a

federated token for GCP access instead of holding a key.Nice to have

IAM deny policies.

IAM Conditions — conditional role bindings.

Experience removing service-account keys at scale, or running a keyless migration.

Custom role design and the governance around it.

Experience operating in large regulated enterprise environments.

Impact

You’ll make GCP access provable — every entitlement declared in code, every machine identity keyless, and

every grant defensible as the least privilege that does the job

Key Skills

Education

Any Gradute