Senior Platform Engineer

Job Summary:

Who We Are

At Disney, we’re storytellers. We make the impossible, possible. The Walt Disney Company is a world-class entertainment and technological leader. Walt’s passion was to continuously envision new ways to move audiences around the world—a passion that remains our touchstone in an enterprise that stretches from theme parks, resorts and a cruise line to sports, news, movies and a variety of other businesses. Uniting each endeavor is a commitment to creating and delivering unforgettable experiences — and we’re constantly looking for new ways to enhance these exciting experiences.

The Enterprise Technology mission is to deliver technology solutions that align to business strategies while enabling enterprise efficiency and promoting cross-company collaborative innovation. The Enterprise Technology organization drives competitive advantage by enhancing our consumer experiences, enabling business growth, and advancing operational excellence.

The Identity and Access Management (IAM) Engineering team is hiring talented contributors for innovative projects that will help power and secure our businesses and guest experiences. Leverage your solutions integrations knowledge, industry experience, and your passion for new technologies and platforms. You will be part of a diverse cross-functional team with ownership at the core of its DNA.

What You Will Do:

We are looking for a Senior Platform Engineer to join Disney’s Enterprise Technology Identity and Access Management (IAM) group. This group's core mission is providing a Core IAM ecosystem of security services, platforms, and solutions in use across the company by cast members, employees, and partners within Disney’s business segments (DEE&T, DX, Studios) and corporate functions. Our vision is to provide advanced Identity and Access Management capabilities and services that are simple, seamless, and secure to protect our workforce, our data, and our brands.

Responsibilities:

• Design, build, maintain and automate an IAM security solution within a vendor-provided enterprise IAM service/platform protecting thousands of internal applications and data of hundreds of thousands of cast members, employees, and partners of Disney.

• Recommends and implements solutions for the technical integration and implementation of our IAM services in coordination with IAM domain architects, team lead, service leads, software engineers, and our operations teams.

• In collaboration with domain architects and team leads to defines/maintains all aspects of the platform engineering process including service/product technical evaluation process, lab testing, and service solution design.

• Accountable for ensuring all security and compliance standards are upheld as the service delivery team including remediating vulnerabilities, driving compliance evidence collection, and following all change management processes while also providing on call support and incident response and RCA.

• Evaluates capabilities of new security services/functionality and crafts solutions to deliver technology-current and business-aligned platform offerings that evolve our cybersecurity defense and upgrade our security posture.

• Collaborates closely with software engineering teams in support of their custom developed solutions and products that integrate with vendor platforms

• Maintains strong knowledge of emerging technologies and trends

Must Have:

• 5+ years of experience in IT Enterprise Technology, supporting identity and access (IAM), enterprise platforms, and/or collaboration ecosystems within diverse enterprises

• 3+ years providing technical leadership and mentorship to other engineers

• 3+ years of confirmed running Okta at scale within a medium-to-large enterprise environment

• 3+ years of consistent record with implementing or maintaining large-scale identity and access management solutions, experienced in: Products/Vendors: Okta, Active Directory (AzureAD/AD), Ping, Azure AD, SailPoint, BeyondTrust, Single Sign-On; Multi-Factor Authentication (MFA), Password-less

• 2+ years’ experience working with suppliers in an outsourced environment

• Identity Federation, SSO, HCM (e.g., SAP, Workday) and IAM Data Integration

• Protocols/Standards such as SAML, SCIM, OAuth2, OIDC, LDAP, FIDO2, Kerberos

• Experience automating common operational tasks, web service/API integration, and deployment activities in scripting/programming languages (Python, JavaScript, PowerShell)

• Understand security concerns within application (password hashing, SSL/TLS, encryption at rest, XSS, XSRF)

• Expertise with Agile methodologies and delivering solutions through sprint planning activities

Nice To Have:

• Solid grasp with critical data handling such as COPPA, PCI and PII, Safe Harbor

• Familiarity with deployments and integration of IAM solutions with public cloud providers (Azure, AWS, Google Cloud)

• Okta Certified Consultant; Okta Certified Developer; Okta Certified Workflow Specialty

• Professional certifications in other identity and access management platforms and products (Active Directory, Ping, SailPoint)

• CISSP/Security Certifications

Education:

• BS or BA degree in Information Technology, Information Security, Computer Science, or Business related field or equivalent validated work experience

The hiring range for this position in Burbank, California is $114,900-$154,100 per year and in Seattle, Washington is $120,300-$161,300 per year. The base pay actually offered will take into account internal equity and also may vary depending on the candidate’s geographic region, job-related knowledge, skills, and experience among other factors. A bonus and/or long-term incentive units may be provided as part of the compensation package, in addition to the full range of medical, financial, and/or other benefits, dependent on the level and position offered.