We are the movers of the world and the makers of the future. We get up every day, roll up our sleeves and build a better world together. At Ford, we’re all a part of something bigger than ourselves. Are you ready to change the way the world moves?
As part of the Security Identity and Access Management team, we are hiring a DevOps Engineer with a primary technical focus on Google Cloud Platform (GCP). This role offers an exciting opportunity to apply your strong cloud engineering skills to critical security challenges, helping secure our vital cloud, on-prem, and hybrid environments.
You will be a key contributor in a DevSecOps framework, blending development, operations, and security practices to build and maintain our Identity and Access Management (IAM) and Privileged Access Management (PAM) infrastructure. This position requires a candidate capable of managing concurrent and complex development and operational tasks, implementing secure, scalable, automated, and resilient access controls, automating security tasks, and ensuring operational excellence across the platform. You'll work primarily with GCP, understanding how different PAM / IAM systems might coexist or integrate across our enterprise.
Due to the business-critical and global nature of the ePAM platform, this position provides an outstanding opportunity to engage with, deliver value and gain exposure to Global business units, JVs and Technology teams, including Ford Credit, Ford Pro and Model e, Ford Blue, Manufacturing, EPEO, Application Employee Experience, Enterprise Connectivity / Network teams and Cyber Defense.
You'll have...
- Bachelor’s degree in Computer Science, Information Technology OR a combination of education and experience
- 5+ years of IT experience
- 3+ years of Enterprise Google Cloud engineering experience
- 2+ years of IT DevOps experience
Even better, you may have...
Strong written and verbal communication skills with a high degree of attention to detail.Proven ability to independently identify, analyze, and solve complex technical and operational problems with minimal oversight.Ability to quickly learn new technologies and share knowledge with others.Demonstrable ability to work effectively within a globally dispersed team environment.Proven track record to develop and document requirements and technical solutions.Solid understanding and practical application of Site Reliability Engineering (SRE) principles and practices (SLOs / SLIs, toil reduction, incident response).Experience with CI / CD Pipeline development and integration, including Infrastructure as Code (IaC) tools like Terraform.Strong understanding and practical experience with GCP Identity and Access Management (IAM) concepts (roles, policies, service accounts, conditions, security best practices) and leveraging related security services (Workload Identity Federation, Access Context Manager, Secret Manager, Cloud Audit Logs) relevant to PAM.Hands-on experience with core GCP platform components such as Cloud Resource Hierarchy, Cloud Run, Cloud Task, and Cloud Scheduler.Experience with containerization (Docker) and orchestration (., Kubernetes / GKE).Understanding of common authentication and authorization protocols (., OAuth, OIDC, SAML, LDAP).Familiarity with GCP policy enforcement mechanisms (., Organization Policies, VPC Service Controls).Experience with scripting and programming languages (. Python, Golang, BASH, PowerShell) and utilizing APIs (potentially including Microsoft Graph API) for automation, data collection, and solution development in hybrid environments.Experience managing codebase and projects in GitHub.Experience with relevant detection and monitoring tools for system health, performance, and security, including GCP native logging / monitoring (Cloud Monitoring, Cloud Audit Logs) and APM / Observability platforms (like Dynatrace or similar).Strong understanding of core security principles (least privilege, defense-in-depth, Zero Trust).Experience with Agile development concepts and tools such as JIRA.Understanding of Enterprise security domains, with a strong emphasis on Cloud SecurityFamiliarity with other enterprise Privileged Access Management (PAM) tools, including understanding or experience with Microsoft Entra Privileged Access Management and Beyond Trust Password Safe.Experience with Perl programming / scripting.Familiarity with security risk assessment methodologies and compliance frameworks (., SOC 2, ISO 27001) relevant to identity and access scenarios.You may not check every box, or your experience may look a little different from what we've outlined, but if you think you can bring value to Ford Motor Company, we encourage you to apply!
As an established global company, we offer the benefit of choice. You can choose what your Ford future will look like : will your story span the globe, or keep you close to home? Will your career be a deep dive into what you love, or a series of new teams and new skills? Will you be a leader, a changemaker, a technical expert, a culture builder…or all of the above? No matter what you choose, we offer a work life that works for you, including :
Immediate medical, dental, vision and prescription drug coverageFlexible family care days, paid parental leave, new parent ramp-up programs, subsidized back-up child care and moreFamily building benefits including adoption and surrogacy expense reimbursement, fertility treatments, and moreVehicle discount program for employees and family members and management leasesTuition assistanceEstablished and active employee resource groupsPaid time off for individual and team community serviceA generous schedule of paid holidays, including the week between Christmas and New Year’s DayVisa sponsorship is not available for this position.
undefined
