Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 6 hours ago

Sr. Identity Engineer, Google Cloud and DevOps

Vailexa54 open roles

Where
US
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSr. Identity Engineer, Google Cloud and DevOpsVailexa · US

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Vailexa's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.7% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.3%1 day
  2. 4.8%3 days
  3. 13.7%7 days
  4. 22.1%14 days
  5. 37.6%30 days
  6. 59.1%60 days
This job: posted 6 hours ago

The posting

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Sr. Identity Engineer, Google Cloud and DevOps based in the United States.

Join a cloud modernization initiative focused on strengthening identity security and access management across complex enterprise environments. As a Senior Identity Engineer, you will lead the design, implementation, and support of identity solutions across Google Cloud Platform and DevOps services. You will take ownership of single sign-on, identity federation, workload authentication, and access protection while helping modernize the organization's cloud platform. Working with identity, security, cloud, and engineering teams, you will build secure, scalable infrastructure and automated deployment capabilities. You will also contribute to shared platform services, establish reusable technical standards, and improve operational reliability through infrastructure as code and GitOps practices. Beyond hands-on engineering, you will document solutions, mentor colleagues, and help application teams develop the skills needed to operate and evolve the platform independently.

Accountabilities:

  • Design, build, and maintain Google Cloud Platform infrastructure and CI/CD pipelines using Terraform and GitOps, enabling application teams to deploy and manage workloads on Google Kubernetes Engine (GKE).
  • Own single sign-on (SSO) and identity federation across the platform, integrating enterprise identity providers such as Ping with Google Cloud and tools including GitLab, Artifactory, and HashiCorp Vault through SAML and OIDC.
  • Implement Google Cloud Workload Identity and Workload Identity Federation to enable secure, keyless authentication for pipelines, microservices, and other workloads accessing Google services.
  • Manage Google Cloud IAM roles, groups, and least-privilege access models aligned with enterprise identity groups and security requirements.
  • Maintain HashiCorp Vault integrations supporting secrets management, dynamic credentials, and Public Key Infrastructure (PKI).
  • Operate and support shared platform services, including GitLab, Artifactory, Vault, and observability tools.
  • Collaborate with identity, security, cloud, and engineering teams throughout the different implementation phases of the IAM Modernization program.
  • Develop operational runbooks, reusable technical patterns, and comprehensive documentation to support consistent platform management.
  • Mentor engineers and share technical expertise to help teams successfully operate, maintain, and improve the solutions being implemented.
  • Promote secure, scalable, and maintainable engineering practices across the cloud platform.
  • 7 to 10+ years of experience in infrastructure, platform, or DevOps engineering, including several years supporting production workloads on Google Cloud Platform and GKE.
  • Strong hands-on experience with Terraform and the Google Cloud gcloud CLI, with an understanding of infrastructure managed primarily as code rather than through the Google Cloud console.
  • Experience with Google Cloud Workforce Identity Federation and Google Cloud Directory Sync (GCDS).
  • Deep knowledge of SAML 2.0 and OAuth, including practical identity provider integration experience with Ping, Okta, Microsoft Entra ID, or similar platforms.
  • Strong experience managing Google Cloud service accounts and implementing keyless authentication through Workload Identity and Workload Identity Federation.
  • Scripting proficiency in Python and PowerShell; Bash experience is an advantage.
  • Hands-on experience with GitOps tools such as Flux or Argo CD, along with Helm.
  • Experience with HashiCorp Vault, Kubernetes RBAC, and OIDC authentication.
  • CI/CD expertise using GitLab CI or Jenkins, as well as artifact management with Artifactory.
  • Familiarity with Prometheus-based monitoring and observability solutions.
  • Experience working effectively in large enterprise environments with structured governance and change-control processes.
  • Strong written and verbal communication skills, with the ability to collaborate across technical teams and explain complex concepts clearly.
  • A proactive and collaborative mindset, with a genuine interest in teaching, mentoring, and supporting the development of other engineers.
  • Integrations involving Ping, CyberArk, or ServiceNow.
  • Experience with cert-manager and external-dns.
  • Familiarity with Puppet or comparable configuration management tools.
  • Previous experience in healthcare or another highly regulated industry.
  • Opportunity to contribute to a strategic IAM modernization program in a complex Google Cloud environment.
  • Hands-on exposure to cloud infrastructure, identity federation, DevOps automation, and enterprise security technologies.
  • Opportunity to influence platform architecture, establish reusable engineering practices, and drive technical improvements.
  • A collaborative environment that encourages continuous learning, technical ownership, mentorship, and professional growth.
  • Remote work arrangement.

How Jobgether works:

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Vailexa's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Vailexa's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Vailexa's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.