Back to jobs
New

Sr. Identity Engineer, Google Cloud and DevOps

Remote
Build More Than Just a Career. Build Your Future.

At Vailexa, we’re not just hiring — we’re building thinkers, creators, and future leaders.

We believe in giving people the space to grow, the freedom to think, and the opportunity to create real impact from day one. If you’re someone who wants to learn fast, take ownership, and grow beyond limits, you’ll feel right at home here.

Sr. Identity Engineer, Google Cloud and DevOps to support our client as part of its IAM Modernization program. Cloud Platform team and help modernize identity and access management across the cloud platform. You will lead identity and access protection for Google Cloud and DevOps services, own single sign-on and federation across the platform, and help engineers develop the skills and patterns needed to support the solutions you build.

What You Will Do

  • Design, build, and support Google Cloud Platform infrastructure and CI/CD pipelines using Terraform and GitOps, enabling application teams to deploy and manage workloads on Google Kubernetes Engine (GKE).
  • Own single sign-on and federation across the platform, connecting the enterprise identity provider, such as Ping, with Google Cloud and platforms including GitLab, Artifactory, and HashiCorp Vault using SAML and OIDC.
  • Implement Google Cloud Workload Identity and Workload Identity Federation so pipelines and microservices can securely access Google services without relying on long-lived keys.
  • Manage GCP IAM roles, groups, and least-privilege access patterns mapped to enterprise identity groups.
  • Maintain HashiCorp Vault integrations supporting secrets management, dynamic credentials, and PKI.
  • Operate and support shared platform services, including GitLab, Artifactory, Vault, and the observability stack.
  • Partner closely with identity, security, cloud, and engineering teams as the IAM Modernization program progresses through its implementation waves.
  • Develop runbooks and reusable technical patterns, document solutions, and mentor engineers so they can successfully operate and evolve the platform.

Required Skills and Experience

  • 7 to 10+ years of infrastructure, platform, or DevOps engineering experience, including several years supporting production workloads on Google Cloud Platform and GKE.
  • Strong hands-on experience with Terraform and the gcloud CLI. This GCP environment is managed as code rather than primarily through the Google Cloud console.
  • Experience with Google Cloud Workforce Identity Federation and Google Cloud Directory Sync (GCDS).
  • Deep knowledge of SAML 2.0 and OAuth, including hands-on identity provider integration experience with Ping, Okta, Microsoft Entra ID, or similar platforms.
  • Strong Google Cloud service account management experience, including keyless authentication using Workload Identity and Workload Identity Federation.
  • Scripting experience with Python and PowerShell. Bash experience is a plus.
  • Hands-on GitOps experience using Flux or Argo CD, along with Helm.
  • Experience with HashiCorp Vault, Kubernetes RBAC, and OIDC authentication.
  • CI/CD experience with GitLab CI or Jenkins and artifact management using Artifactory.
  • Experience with Prometheus-based monitoring and observability.
  • Demonstrated ability to work effectively within a large, change-controlled enterprise environment.
  • Strong written and verbal communication skills, with a collaborative approach and a willingness to teach and mentor other engineers.

Nice to Have

  • Experience integrating Ping, CyberArk, or ServiceNow.
  • Experience with cert-manager and external-dns.
  • Puppet or similar configuration management experience.
  • Previous experience working in healthcare or another highly regulated industry.

Vailexa Technology is an equal opportunity employer. We consider all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other protected status under applicable law.

 

 

Ready to take the next step?

If you’re excited about this role and ready to grow with a team that values ambition, ideas, and impact — we’d love to hear from you.

👉 Apply now and start building your journey with Vailexa.

Apply for this job

*

indicates a required field

Resume/CV

Accepted file types: pdf, doc, docx, txt, rtf

Cover Letter

Accepted file types: pdf, doc, docx, txt, rtf

Select...
Select...
Select...

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in Vailexa ’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Select...
Select...
Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Select...