IAM Engineer, SSO

The Role

We are currently looking for a highly motivated, dependable, and self-driven Staff IAM Engineer, experienced in Active Directory, Active Directory Certificate Services, Azure AD and Active Directory Federated Services to join our team. The ideal candidate will be responsible for the design, implementation, and administration of several production IAM services globally. They will utilize extensive knowledge in server systems, such as: ADCS, Active Directory, Azure Active Directory, Windows Server (2008 through 2022) primarily as well as skill in Linux (CentOS and Ubuntu) secondarily. This role will also be responsible for helping to grow our systems according to industry standards and best practices. On top of being an excellent engineer, our ideal candidate is most effective in a fast-paced collaborative environment, delights in new problem areas, and is driven by curiosity and a creative spirit.

Responsibilities

• Gap analysis on these procedures and practices in relation to SSO availability (understanding what patches or configurations may adversely affect or benefit the service)
• Standardize authentication and authorization software, policies, and procedures across the enterprise
• Architect complex IAM systems which span multiple organizations, challenging requirements and ensuring appropriate access to mission-critical systems
• Scope and perform security reviews of on-premises infrastructure, private and public cloud environments
• Must participate in 24/7 On-Call rotation

Requirements

• Bachelor's Degree in Information Systems, Information Security, Computer Science, or Computer Engineering, 4-6+ years of information security, networking and/or systems administration experience, or equivalent
• 4+ years of experience designing, building, implementing, integrating and/or maintaining IAM and configuration management technologies in an enterprise level environment
• Experience with various IdP solutions such as AD, Azure AD, or Okta
• Experience with Linux, Windows, and Mac system internals
• Experience with SAML, OIDC, and Oauth
• Familiarity with developing web-based APIs, HTTP-RPC, and REST
• Familiarity with macOS and Windows code-signing and deployment of enterprise application
• Thorough understanding of common network and federated authentication protocols like Kerberos, OAUTH, NTLM, OIDC, SAML, FIDO, etc
• Have experience in identity access management and governance, to include single sign on, identity federation, lifecycle management, enterprise directory architecture and design, and resource provisioning; Azure preferred

Compensation and Benefits

Benefits

Along with competitive pay, as a full-time Tesla employee, you are eligible for the following benefits at day 1 of hire:

• Aetna PPO and HSA plans > 2 medical plan options with $0 payroll deduction
• Family-building, fertility, adoption and surrogacy benefits
• Dental (including orthodontic coverage) and vision plans, both have options with a $0 paycheck contribution
• Company Paid (Health Savings Account) HSA Contribution when enrolled in the High Deductible Aetna medical plan with HSA
• Healthcare and Dependent Care Flexible Spending Accounts (FSA)
• LGBTQ+ care concierge services
• 401(k) with employer match, Employee Stock Purchase Plans, and other financial benefits
• Company paid Basic Life, AD&D, short-term and long-term disability insurance
• Employee Assistance Program
• Sick and Vacation time (Flex time for salary positions), and Paid Holidays
• Back-up childcare and parenting support resources
• Voluntary benefits to include: critical illness, hospital indemnity, accident insurance, theft & legal services, and pet insurance
• Weight Loss and Tobacco Cessation Programs
• Tesla Babies program
• Commuter benefits
• Employee discounts and perks program
Expected Compensation

$104,000 - $348,000/annual salary + cash and stock awards + benefits

Pay offered may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, and experience. The total compensation package for this position may also include other elements dependent on the position offered. Details of participation in these benefit plans will be provided if an employee receives an offer of employment.