Senior Platform Engineer

Department Description:

At Disney, we're storytellers. We make the impossible, possible. The Walt Disney Company is a world-class entertainment and technological leader. Walt's passion was to continuously envision new ways to move audiences around the world-a passion that remains our touchstone in an enterprise that stretches from theme parks, resorts and a cruise line to sports, news, movies and a variety of other businesses. Uniting each endeavor is a commitment to creating and delivering unforgettable experiences - and we're constantly looking for new ways to enhance these exciting experiences.

The Enterprise Technology mission is to deliver technology solutions that align to business strategies while enabling enterprise efficiency and promoting cross-company collaborative innovation. The Enterprise Technology organization drives competitive advantage by enhancing our consumer experiences, enabling business growth, and advancing operational excellence.

Team Description:

The Identity and Access Management (IAM) Engineering team is hiring talented contributors for innovative projects that will help power and secure our businesses and guest experiences. Leverage your solutions integrations knowledge, industry experience, and your passion for new technologies and platforms. You will be part of a diverse cross-functional team with ownership at the core of its DNA.

The IAM group's core mission is providing a Core IAM ecosystem of security services, platforms, and solutions in use across the company by cast members, employees, and partners within Disney's business segments (DEE&T, DX, Studios) and corporate functions. Our vision is to provide advanced Identity and Access Management capabilities and services that are simple, seamless, and secure to protect our workforce, our data, and our brands.

Responsibilities of Role:

• Design, build, maintain and automate an IAM security solution within a vendor-provided enterprise IAM service/platform protecting thousands of internal applications and data of hundreds of thousands of cast members, employees, and partners of Disney.

• Recommends and implements solutions for the technical integration and implementation of our IAM services in coordination with IAM domain architects, team lead, service leads, software engineers, and our operations teams.

• In collaboration with domain architects and team leads to defines/maintains all aspects of the platform engineering process including service/product technical evaluation process, lab testing, and service solution design.

• Accountable for ensuring all security and compliance standards are upheld as the service delivery team including remediating vulnerabilities, driving compliance evidence collection, and following all change management processes while also providing on call support and incident response and RCA.

• Evaluates capabilities of new security services/functionality and crafts solutions to deliver technology-current and business-aligned platform offerings that evolve our cybersecurity defense and upgrade our security posture.

• Collaborates closely with software engineering teams in support of their custom developed solutions and products that integrate with vendor platforms

• Maintains strong knowledge of emerging technologies and trends

Must Haves:

• Minimum of 5 years of experience in IT Enterprise Technology, supporting identity and access (IAM), enterprise platforms, and/or collaboration ecosystems within diverse enterprises

• 3+ years providing technical leadership and mentorship to other engineers

• 3+ years of confirmed running Okta at scale within a medium-to-large enterprise environment

• 3+ years of consistent record with implementing or maintaining large-scale identity and access management solutions, experienced in: Products/Vendors: SailPoint, SGNL, Okta, Active Directory, Entra ID

• 2+ years' experience working with suppliers in an outsourced environment

• Identity Lifecycle Management, HCM (e.g., SAP, Workday) and IAM Data Integration

• Protocols/Standards such as SCIM, OAuth2, SAML, OIDC, LDAP

• Experience automating access provisioning and deprovisioning

• Familiarity with zero standing access concepts and policy-based access management

• Experience automating common operational tasks, web service/API integration, and deployment activities in scripting/programming languages (Python, JavaScript, PowerShell)

• Understand security concerns within application (password hashing, SSL/TLS, encryption at rest, XSS, XSRF)

• Expertise with Agile methodologies and delivering solutions through sprint planning activities

Nice To Haves:

• Solid grasp with critical data handling such as SOX, PCI and PII, Safe Harbor

• SailPoint Certifications

• SGNL Practitioner Certification

• Professional certifications in other identity and access management platforms and products (Active Directory, Okta)

• CISSP/Security Certifications

Education:

• Bachelors degree in Information Technology, Information Security, Computer Science, or equivalent work experience

#DISNEYTECH

The hiring range for this position in Burbank, CA is $114,900 - $154,100 and in Seattle, WA is $120,300 - $161,300 per year. The base pay actually offered will take into account internal equity and also may vary depending on the candidate's geographic region, job-related knowledge, skills, and experience among other factors. A bonus and/or long-term incentive units may be provided as part of the compensation package, in addition to the full range of medical, financial, and/or other benefits, dependent on the level and position offered.

Job ID:

Location: Burbank,California

Job Posting Company: The Walt Disney Company (Corporate)

The Walt Disney Company and its Affiliated Companies are Equal Employment Opportunity employers and welcome all job seekers including individuals with disabilities and veterans with disabilities. If you have a disability and believe you need a reasonable accommodation in order to search for a job opening or apply for a position, email with your request. This email address is not for general employment inquiries or correspondence. We will only respond to those requests that are related to the accessibility of the online application system due to a disability.