Senior Engineer, DevSecOps & GCP IAM

What We'll Bring:

We are looking for a highly experienced Senior Engineer with a strong background in DevSecOps, Infrastructure as Code (IaC), and cloud-native security, with a specific focus on Google Cloud Platform (GCP). The ideal candidate will have deep expertise in GCP IAM, Terraform, Python, and CI/CD pipelines using tools like Harness, and will be responsible for building secure, scalable, and automated infrastructure and identity solutions

What You'll Bring:

Key Responsibilities:

• Design and implement DevSecOps pipelines with integrated security controls across the SDLC.
• Develop and manage Infrastructure as Code using Terraform, with a focus on GCP resource provisioning and IAM policies.
• Build and maintain CI/CD pipelines using Harness, GitLab CI, or similar tools.
• Implement and manage GCP IAM roles, policies, service accounts, and organization-level security controls.
• Integrate and support IAM solutions such as SailPoint, Ping Identity, and Privileged Access Management (PAM) tools.
• Collaborate with security teams to enforce least privilege access, identity federation, and compliance automation.
• Monitor infrastructure and application security posture using GCP-native tools (e.g., Security Command Center, Cloud Audit Logs).
• Automate security testing and compliance checks within CI/CD workflows.
• Maintain documentation for infrastructure, IAM configurations, and security procedures.

Required Skills & Qualifications:

• Bachelor's degree in Computer Science, Engineering, or related field.
• 5+ years of experience in DevOps, DevSecOps, or Cloud Security Engineering roles.
• Strong hands-on experience with GCP IAM, Terraform, and Python.
• Proficiency in building and managing CI/CD pipelines (Harness preferred).
• Familiarity with IAM platforms like SailPoint, Ping Identity, and PAM tools.
• Solid understanding of cloud security best practices, identity lifecycle management, and compliance frameworks.
• Experience with containerization (Docker, Kubernetes) and monitoring tools (e.g., Prometheus, Grafana).

Impact You'll Make:

Preferred Qualifications:

• GCP certifications (e.g., Professional Cloud Security Engineer, Cloud DevOps Engineer).
• Experience with GitOps, policy-as-code (e.g., OPA), and security automation.
• Exposure to multi-cloud IAM strategies and federated identity management.

This is a hybrid position and involves regular performance of job responsibilities virtually as well as in-person at an assigned TU office location for a minimum of two days a week.

TransUnion Job Title

Sr Engineer, InfoSec Engineering