This project focuses on designing and implementing a secure enterprise IAM framework on Google Cloud using IAM roles, service accounts, and workload identity federation. It manages user access, service-to-service authentication, and privilege boundaries across multiple projects and environments. Business rules enforce least-privilege access, role separation, and audit logging. Security policies are applied to prevent unauthorized access and privilege escalation. The project reflects real-world identity governance models used by large-scale cloud enterprises.

This project involves building a highly secure VPC architecture with firewall rules, private access, VPN connectivity, and Cloud NAT to protect internal resources. Network segmentation, ingress and egress controls, and Zero Trust principles are implemented to reduce attack surfaces. Monitoring and logging are enabled to detect anomalous traffic patterns and security violations. The project mirrors enterprise network security implementations used in regulated cloud environments.

This project focuses on implementing a centralized threat detection and incident response solution using Security Command Center, Cloud Logging, and Event Threat Detection. It manages real-time monitoring, alerting, and investigation of security events across cloud resources. Automated response workflows are configured to reduce response time and mitigate risks. The project demonstrates real-world cloud security operations followed by enterprise SOC teams.