diff --git a/.github/workflows/CD_staging.yml b/.github/workflows/CD_staging.yml
index 519288372..94270a832 100644
--- a/.github/workflows/CD_staging.yml
+++ b/.github/workflows/CD_staging.yml
@@ -32,11 +32,6 @@ jobs:
               --no-dev \
               --output-file requirements.txt
 
-        - name: Authenticate to Google Cloud
-          uses: 'google-github-actions/auth@v2'
-          with:
-            credentials_json: ${{ secrets.CLOUD_DEPLOY_SERVICE_ACCOUNT_KEY }}
-
         - name: Run Alembic migrations on staging database
           env:
             DB_DRIVER: "cloudsql"
@@ -57,6 +52,11 @@ jobs:
           run: |
             uv run python transfers/backfill/staging.py
 
+        - name: Authenticate to Google Cloud
+          uses: 'google-github-actions/auth@v2'
+          with:
+            credentials_json: ${{ secrets.CLOUD_DEPLOY_SERVICE_ACCOUNT_KEY }}
+
         # Uses Google Cloud Secret Manager to store secret credentials
         - name: Create app.yaml
           run: |