{"id":1597102,"url":"https://alion.io/job/globant-gcp-iam-lead-manager","title":"GCP IAM Lead / Manager","company":{"id":61174,"name":"Globant","domain":"globant.com","url":"https://alion.io/company/globant","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Career site","truth_index":{"grade":"C","score":62,"open_postings":73,"ghost_share":0.548,"stale_share":0,"repost_share":0.014,"time_to_fill_p50_days":124,"computed_at":"2026-10-20T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["New York, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":90000,"max":140000,"currency":"USD","period":"year","gross":null,"usd_annual":140000},"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Terraform","optional":false},{"name":"CI/CD","optional":true},{"name":"Google Workspace","optional":true},{"name":"ISO 27001","optional":true},{"name":"PCI DSS","optional":true},{"name":"SOC 2","optional":true}],"status":"live","first_seen_at":"2026-09-22T18:43:50Z","employer_posted_date":"2026-10-01","last_verified_at":"2026-10-20T14:35:05Z","board_verified":true,"closed_at":null,"days_open":27,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":27},"description":"GCP IAM Lead / Manager\nLocation: New York, NY\nCompensation: $90,000-$140,000 annually\nEmployment Type: Full-time\nPosition Summary\nWe are seeking an experienced GCP IAM Lead / Manager to support a Deloitte project team delivering secure, scalable cloud identity and access management capabilities. This role will own the design, governance, and delivery of Google Cloud Platform (GCP) Identity and Access Management solutions across multiple onboarding efforts.\nThe ideal candidate has deep hands-on GCP IAM expertise, strong Terraform and infrastructure-as-code governance experience, and a security-by-design mindset. You will establish repeatable IAM patterns, guide engineering teams through implementation, manage access-control risks and exceptions, and partner with security and compliance stakeholders to support audit-ready delivery.\nThis role is well suited for an IAM leader who can balance architecture, delivery execution, governance, and operational support in a complex enterprise environment. The work will emphasize least-privilege access, resource-level permissions, well-managed service accounts, documented controls, and scalable onboarding standards. Google recommends granting roles at the smallest practical scope, avoiding broad basic roles in production, and using separate service accounts with narrowly scoped privileges for distinct application components.cloud.google+1\nKey Responsibilities\nLead the design and implementation of GCP IAM solutions supporting enterprise cloud onboarding and migration initiatives.\n\nDefine and maintain IAM reference architectures, including role-based access control (RBAC) models, group-based access patterns, service account strategy, privileged-access patterns, and authentication and authorization controls.\n\nEstablish secure-by-default IAM standards for Google Cloud environments, with a focus on least privilege, segregation of duties, role scoping, temporary access, and auditability.\n\nDevelop and govern Terraform standards for IAM, including reusable module patterns, safe role-binding strategies, code-review requirements, change controls, and drift-management practices.\n\nLead IAM design reviews and provide technical guidance to engineering teams implementing cloud access controls.\n\nEvaluate and approve IAM exceptions; document risks, compensating controls, remediation plans, and approval decisions.\n\nPartner with cybersecurity, risk, compliance, platform engineering, application teams, and project stakeholders to define and implement access-control requirements.\n\nConfigure and manage IAM roles, policies, groups, service accounts, permissions, conditional access, and privileged-access controls.\n\nDesign and maintain secure service-account practices, including dedicated application identities, minimal permissions, lifecycle management, access reviews, and reduction of unnecessary service-account keys.\n\nSupport user authentication and authorization requirements across GCP projects, applications, APIs, services, and data platforms.\n\nTroubleshoot and resolve IAM-related access, authentication, authorization, provisioning, policy, and service-account issues.\n\nManage delivery across multiple onboarding efforts, including priorities, timelines, dependencies, risks, and stakeholder communications.\n\nDefine the IAM operating model, including runbooks, incident-response procedures, access-request processes, access recertification inputs, monitoring, and support escalation paths.\n\nConduct regular IAM audits, access reviews, policy assessments, and compliance checks against established security standards and project requirements.\n\nDevelop and maintain technical documentation for IAM architectures, configurations, policies, implementation procedures, operational processes, and audit evidence.\n\nTrack and report IAM delivery metrics, onboarding progress, exceptions, remediation activities, operational incidents, and control effectiveness.\n\nRequired Qualifications\n7+ years of experience in identity and access management, cloud security, cybersecurity engineering, or related technical roles.\n\nStrong hands-on experience designing and implementing GCP IAM solutions in enterprise environments.\n\nDemonstrated experience developing IAM architecture patterns for complex cloud environments, including RBAC, service accounts, privileged access, authorization models, and least-privilege controls.\n\nExperience leading multiple technical workstreams, engineering teams, or cloud onboarding efforts.\n\nStrong experience with Terraform and infrastructure as code, including IAM modules, policy management, code review, change control, and deployment governance.\n\nExperience implementing and managing IAM policies, roles, permissions, groups, service accounts, authentication, authorization, and access reviews.\n\nKnowledge of cloud-security concepts, including least privilege, segregation of duties, privileged access, access lifecycle management, logging, auditing, and incident response.\n\nExperience troubleshooting identity, authentication, authorization, and access-control issues in a cloud environment.\n\nStrong stakeholder-management skills and the ability to communicate technical controls, risks, design decisions, and implementation requirements to technical and nontechnical audiences.\n\nAbility to create clear technical documentation, runbooks, process flows, standards, and audit-support materials.\n\nPreferred Qualifications\nExperience in financial services, consulting, banking, wealth management, insurance, or another highly regulated industry.\n\nExperience working on large-scale cloud migration, cloud transformation, application onboarding, or enterprise platform modernization initiatives.\n\nFamiliarity with Google Cloud security services, organization policies, Cloud Identity, Google Workspace, Cloud Logging, Security Command Center, or IAM Recommender.\n\nExperience with access recertification, identity governance and administration (IGA), privileged access management (PAM), or entitlement-management processes.\n\nExperience with CI/CD pipelines and automated Terraform deployment practices.\n\nKnowledge of compliance and control frameworks, such as NIST, SOC 2, ISO 27001, PCI DSS, SOX, or internal risk-management standards.\n\nRelevant certifications, such as Google Professional Cloud Security Engineer, Google Professional Cloud Architect, CISSP, CISM, CCSP, or Terraform Associate.","description_format":"text","description_chars":6385,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Education","Higher Education"],"lifecycle":[{"event":"open","at":"2026-10-01T18:15:51Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 1","filings_12m":1,"filings_prev_12m":0,"green_card_filings_12m":0,"median_offered_wage_usd":352500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":62,"band":"ok","label":"Likely open","p_open":1,"p_active":0.621,"p_room":1,"age_days":27,"expected_fill_days":124,"reasons":["conf:0","stale_co","velocity","win:early"],"computed_at":"2026-10-20T05:45:00Z"},"pay":{"stated_usd_annual":140000,"is_top_pay":false},"html_url":"https://alion.io/job/globant-gcp-iam-lead-manager","json_url":"https://alion.io/job/globant-gcp-iam-lead-manager.json","meta":{"generated_at":"2026-10-20T14:37:43Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16457,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-21T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":61174},"rest":"https://alion.io/mcp/rest/get_company?id=61174"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fglobant-gcp-iam-lead-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fglobant-gcp-iam-lead-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fglobant-gcp-iam-lead-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/globant-gcp-iam-lead-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fglobant-gcp-iam-lead-manager"}]}