About this role
As a Zero Trust Software Engineer, you will design and build the software, automation, and tooling that powers Tesla's global Zero Trust infrastructure at scale. You will develop platform integrations, infrastructure-as-code modules, APIs, automation pipelines, and custom tooling that enable Tesla's Zero Trust platforms to be deployed, configured, monitored, and operated programmatically. This is a hands-on engineering role requiring strong proficiency in Terraform, Python, Go, and/or PowerShell, with the ability to build production-grade software that operates Tesla's security infrastructure.
- Design and develop infrastructure-as-code (Terraform) modules for provisioning and managing Zero Trust platform resources (Zscaler, Akamai Guardicore, Teleport, Azure AD/Entra ID)
- Build and maintain CI/CD pipelines for Zero Trust infrastructure deployment, configuration changes, and policy updates with automated validation and rollback
- Develop custom APIs and microservices (Go, Python) that integrate Zero Trust platforms with Tesla's internal systems, identity providers, and security tooling
- Create automation frameworks (Python, PowerShell) for operational tasks: user provisioning, policy deployment, certificate management, log aggregation, and compliance reporting
- Build monitoring and observability tooling, including custom Grafana dashboards, Prometheus exporters, and Splunk integrations for Zero Trust platform telemetry
- Develop self-service tooling that enables teams across Tesla to request, configure, and manage Zero Trust access without manual intervention
- Write and maintain PowerShell modules for Windows-based Zero Trust operations, Active Directory integrations, and endpoint configuration management
- Implement automated testing frameworks for Zero Trust policy validation, ensuring policy changes do not introduce access regressions
- Contribute to internal developer platforms and SDKs that abstract Zero Trust platform APIs for consumption by other engineering teams
- Perform code reviews, maintain documentation, and follow software engineering best practices (version control, testing, observability, secure coding)
- Collaborate with Systems and Network Engineering teams to translate operational requirements into automated, repeatable solutions
- Participate in 24/7 on-call rotation as required
- 5+ years of software engineering experience with production systems
- Strong proficiency in at least two of the following: Terraform, Python, Go, PowerShell ; working knowledge of the others
- 3+ years of experience building automation and tooling for security or infrastructure platforms
- Experience with infrastructure-as-code at scale (Terraform providers, modules, state management, CI/CD integration)
- Proficiency with API development (REST, gRPC) and integration patterns (webhooks, event-driven, message queues)
- Experience with CI/CD platforms (GitHub Actions, GitLab CI, Jenkins, ArgoCD) and GitOps workflows
- Familiarity with Zero Trust Architecture principles and at least one Zero Trust platform (Zscaler, Guardicore, Cloudflare Access, Palo Alto Prisma)
- Experience with cloud platforms (Azure, AWS, GCP) and their IAM/networking primitives
- Proficiency with containerization (Docker, Kubernetes) and container orchestration
- Experience with monitoring and observability stacks (Prometheus, Grafana, Splunk, ELK)
- Strong understanding of identity protocols (SAML, OIDC, OAuth2, SCIM) and directory services (Active Directory, Azure AD/Entra ID)
- Experience with version control (Git), code review practices, and automated testing
- Bachelor's degree in Computer Science, Software Engineering, or equivalent work experience
- Effective verbal and written communication skills
Nice to Have
- Experience writing custom Terraform providers
- Contributions to open-source security or infrastructure tooling
- Experience with Open Policy Agent (OPA) or other policy-as-code frameworks
- Familiarity with SPIFFE/SPIRE for workload identity
- Experience with PKI automation and certificate lifecycle management