Sr. Identity Engineer, Google Cloud and DevOps

Company shown to members 🔒 · Remote · US only

US onlySeniorPublished 6 November 2026Looks fresh

Apply free: 3 jobs are on us✨ Tailor my resume for this job🎤 Practise the interview question, free

✓ Straight from the company's own careers page. No middlemen, no “we'll send you a check for equipment”. How we check jobs

✓ Sent 100 applications and heard nothing? Make this one count: tailor your resume to this ad in one tap, free.

✨ Not sure this is the one? Get your remote job matches in 30 seconds →

First recorded by Psst: 7 November 2026. Your first 3 jobs are free to apply to (the first right away, 2 more with your email). After that, the company and the apply link are for Psst members, from $4.99 for 7 days.

Free interview practice

Practise the first interview question for this job

If the company replies, the first call usually starts with a question like this. Vague answers are the easiest to reject. Write yours and get an AI score in under a minute.

The 20-second read

Experience
Senior
Where you can live
US only
Skills and tools
python, gcp, kubernetes, terraform, ci/cd, account management

Read from the ad by Psst's rules. Check the full ad below before applying.

Job details

Where you can work
United States
Employment type
Not stated by the employer
Advertised pay
Not stated by the employer
Experience
Senior
Employer publication date
6 November 2026
First recorded by Psst
7 November 2026
Last checked at the source
11 November 2026

About the job

Build More Than Just a Career. Build Your Future.

At the company, we’re not just hiring — we’re building thinkers, creators, and future leaders.

We believe in giving people the space to grow, the freedom to think, and the opportunity to create real impact from day one. If you’re someone who wants to learn fast, take ownership, and grow beyond limits, you’ll feel right at home here.

Sr. Identity Engineer, Google Cloud and DevOps to support our client as part of its IAM Modernization program . Cloud Platform team and help modernize identity and access management across the cloud platform. You will lead identity and access protection for Google Cloud and DevOps services, own single sign-on and federation across the platform, and help engineers develop the skills and patterns needed to support the solutions you build.

What You Will Do

  • Design, build, and support Google Cloud Platform infrastructure and CI/CD pipelines using Terraform and GitOps, enabling application teams to deploy and manage workloads on Google Kubernetes Engine (GKE).
  • Own single sign-on and federation across the platform, connecting the enterprise identity provider, such as Ping, with Google Cloud and platforms including GitLab, Artifactory, and HashiCorp Vault using SAML and OIDC.
  • Implement Google Cloud Workload Identity and Workload Identity Federation so pipelines and microservices can securely access Google services without relying on long-lived keys.
  • Manage GCP IAM roles, groups, and least-privilege access patterns mapped to enterprise identity groups.
  • Maintain HashiCorp Vault integrations supporting secrets management, dynamic credentials, and PKI.
  • Operate and support shared platform services, including GitLab, Artifactory, Vault, and the observability stack.
  • Partner closely with identity, security, cloud, and engineering teams as the IAM Modernization program progresses through its implementation waves.
  • Develop runbooks and reusable technical patterns, document solutions, and mentor engineers so they can successfully operate and evolve the platform.

Required Skills and Experience

  • 7 to 10+ years of infrastructure, platform, or DevOps engineering experience, including several years supporting production workloads on Google Cloud Platform and GKE.
  • Strong hands-on experience with Terraform and the gcloud CLI. This GCP environment is managed as code rather than primarily through the Google Cloud console.
  • Experience with Google Cloud Workforce Identity Federation and Google Cloud Directory Sync (GCDS).
  • Deep knowledge of SAML 2.0 and OAuth, including hands-on identity provider integration experience with Ping, Okta, Microsoft Entra ID, or similar platforms.
  • Strong Google Cloud service account management experience, including keyless authentication using Workload Identity and Workload Identity Federation.
  • Scripting experience with Python and PowerShell. Bash experience is a plus.
  • Hands-on GitOps experience using Flux or Argo CD, along with Helm.
  • Experience with HashiCorp Vault, Kubernetes RBAC, and OIDC authentication.
  • CI/CD experience with GitLab CI or Jenkins and artifact management using Artifactory.
  • Experience with Prometheus-based monitoring and observability.
  • Demonstrated ability to work effectively within a large, change-controlled enterprise environment.
  • Strong written and verbal communication skills, with a collaborative approach and a willingness to teach and mentor other engineers.

Nice to Have

  • Experience integrating Ping, CyberArk, or ServiceNow.
  • Experience with cert-manager and external-dns.
  • Puppet or similar configuration management experience.
  • Previous experience working in healthcare or another highly regulated industry.

The company Technology is an equal opportunity employer. We consider all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other protected status under applicable law.

Ready to take the next step?

If you’re excited about this role and ready to grow with a team that values ambition, ideas, and impact — we’d love to hear from you.

👉 Apply now and start building your journey with the company.

Apply free: 3 jobs are on us✨ Tailor my resume for this jobPrepare with the Apply kitMore remote DevOps and site reliability engineer jobs →

Find my remote job matches →
Ghost Job Detector: Looks fresh
  • No pay listed
Signals, not proof. Check the company's page before you spend time on it.
Free to build · no sign-up

A resume that gets past the first 6 seconds

Recruiters skim. The Psst resume coach fixes what makes them skip you, line by line, and one tap tailors it to the exact job you're applying to.

  • 1Every line checkedWeak starts, clichés and AI-sounding phrases flagged, with a 3-question fix.
  • 2Tailored to the jobSee which skills and tools from the ad your resume is missing. Try it free on one of your matches.
  • 3Ready for remoteTime zone, tools and proof you work on your own, the things remote teams look for.
  • 4Looks the partOne page, 6 designs, 8 colours and a matching cover letter, free to build. Premium downloads the PDF and Word files.
Try the resume coach →Compare Premium

Set up your job alert