Google Cloud IAM Audit and Cleanup

We are seeking an experienced freelancer to conduct a comprehensive audit and cleanup of our Google Cloud IAM configurations. The ideal candidate will have a strong understanding of IAM best practices and be able to identify and rectify any security vulnerabilities or inefficiencies. We need an experienced GCP administrator/security consultant to: 1) Audit current access — Review all users, service accounts, and API keys across our GCP organization and projects. Identify who has access, what level, and whether it's still needed. 2) Offboard former developers — Safely remove access for people no longer working with us, including transferring ownership of any resources, service accounts, or credentials tied to their accounts so nothing breaks. 3) Security review — Verify our overall security posture is set up correctly (IAM policies, principle of least privilege, org policies, billing alerts, logging/audit trails, exposed resources, firewall rules). Establish a permissions framework — Set up proper roles and groups so we can grant future developers appropriate, limited access to specific projects — and revoke it cleanly when engagements end. 4) Documentation — Provide a simple written summary of what was found, what was changed, and a repeatable process for onboarding/offboarding developers going forward. Responsibilities include reviewing current IAM roles, permissions, and access levels, and providing recommendations for improvements. The goal is to ensure our IAM setup is secure, efficient, and aligned with our organizational needs.