[Hiring] Senior Identity Engineer @Vailexa

Role Description

At Vailexa, we’re not just hiring — we’re building thinkers, creators, and future leaders. We believe in giving people the space to grow, the freedom to think, and the opportunity to create real impact from day one. If you’re someone who wants to learn fast, take ownership, and grow beyond limits, you’ll feel right at home here.

As a Sr. Identity Engineer, you will support our client as part of its IAM Modernization program and help modernize identity and access management across the cloud platform.

• Design, build, and support Google Cloud Platform infrastructure and CI/CD pipelines using Terraform and GitOps, enabling application teams to deploy and manage workloads on Google Kubernetes Engine (GKE).
• Own single sign-on and federation across the platform, connecting the enterprise identity provider, such as Ping, with Google Cloud and platforms including GitLab, Artifactory, and HashiCorp Vault using SAML and OIDC.
• Implement Google Cloud Workload Identity and Workload Identity Federation so pipelines and microservices can securely access Google services without relying on long-lived keys.
• Manage GCP IAM roles, groups, and least-privilege access patterns mapped to enterprise identity groups.
• Maintain HashiCorp Vault integrations supporting secrets management, dynamic credentials, and PKI.
• Operate and support shared platform services, including GitLab, Artifactory, Vault, and the observability stack.
• Partner closely with identity, security, cloud, and engineering teams as the IAM Modernization program progresses through its implementation waves.
• Develop runbooks and reusable technical patterns, document solutions, and mentor engineers so they can successfully operate and evolve the platform.

Qualifications

• 7 to 10+ years of infrastructure, platform, or DevOps engineering experience, including several years supporting production workloads on Google Cloud Platform and GKE.
• Strong hands-on experience with Terraform and the gcloud CLI.
• Experience with Google Cloud Workforce Identity Federation and Google Cloud Directory Sync (GCDS).
• Deep knowledge of SAML 2.0 and OAuth, including hands-on identity provider integration experience with Ping, Okta, Microsoft Entra ID, or similar platforms.
• Strong Google Cloud service account management experience, including keyless authentication using Workload Identity and Workload Identity Federation.
• Scripting experience with Python and PowerShell; Bash experience is a plus.
• Hands-on GitOps experience using Flux or Argo CD, along with Helm.
• Experience with HashiCorp Vault, Kubernetes RBAC, and OIDC authentication.
• CI/CD experience with GitLab CI or Jenkins and artifact management using Artifactory.
• Experience with Prometheus-based monitoring and observability.
• Demonstrated ability to work effectively within a large, change-controlled enterprise environment.
• Strong written and verbal communication skills, with a collaborative approach and a willingness to teach and mentor other engineers.

Requirements

• Experience integrating Ping, CyberArk, or ServiceNow.
• Experience with cert-manager and external-dns.
• Puppet or similar configuration management experience.
• Previous experience working in healthcare or another highly regulated industry.

Benefits

• Equal opportunity employer.
• Consideration of all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other protected status under applicable law.

Company Description

Ready to take the next step? If you’re excited about this role and ready to grow with a team that values ambition, ideas, and impact — we’d love to hear from you.

👉 Apply now and start building your journey with Vailexa.