Software Engineer, Zero Trust - Amsterdam

What to Expect

What You’ll Do

• Design and develop infrastructure-as-code (Terraform) modules for provisioning and managing Zero Trust platform resources (Zscaler, Akamai Guardicore, Teleport, Azure AD/Entra ID) 
• Build and maintain CI/CD pipelines for Zero Trust infrastructure deployment, configuration changes, and policy updates with automated validation and rollback 
• Develop custom APIs and microservices (Go, Python) that integrate Zero Trust platforms with Tesla's internal systems, identity providers, and security tooling 
• Create automation frameworks (Python, PowerShell) for operational tasks: user provisioning, policy deployment, certificate management, log aggregation, and compliance reporting 
• Build monitoring and observability tooling, including custom Grafana dashboards, Prometheus exporters, and Splunk integrations for Zero Trust platform telemetry 
• Develop self-service tooling that enables teams across Tesla to request, configure, and manage Zero Trust access without manual intervention 
• Write and maintain PowerShell modules for Windows-based Zero Trust operations, Active Directory integrations, and endpoint configuration management 
• Implement automated testing frameworks for Zero Trust policy validation, ensuring policy changes do not introduce access regressions 
• Contribute to internal developer platforms and SDKs that abstract Zero Trust platform APIs for consumption by other engineering teams 
• Perform code reviews, maintain documentation, and follow software engineering best practices (version control, testing, observability, secure coding) 
• Collaborate with Systems and Network Engineering teams to translate operational requirements into automated, repeatable solutions 
• Participate in 24/7 on-call rotation as required

What You’ll Bring

• 5+ years of software engineering experience with production systems 
• Strong proficiency in at least two of the following:Terraform, Python, Go, PowerShell; working knowledge of the others 
• 3+ years of experience building automation and tooling for security or infrastructure platforms 
• Experience with infrastructure-as-code at scale (Terraform providers, modules, state management, CI/CD integration) 
• Proficiency with API development (REST, gRPC) and integration patterns (webhooks, event-driven, message queues) 
• Experience with CI/CD platforms (GitHub Actions, GitLab CI, Jenkins, ArgoCD) and GitOps workflows 
• Familiarity with Zero Trust Architecture principles and at least one Zero Trust platform (Zscaler, Guardicore, Cloudflare Access, Palo Alto Prisma) 
• Experience with cloud platforms (Azure, AWS, GCP) and their IAM/networking primitives 
• Proficiency with containerization (Docker, Kubernetes) and container orchestration 
• Experience with monitoring and observability stacks (Prometheus, Grafana, Splunk, ELK) 
• Strong understanding of identity protocols (SAML, OIDC, OAuth2, SCIM) and directory services (Active Directory, Azure AD/Entra ID) 
• Experience with version control (Git), code review practices, and automated testing 
• Bachelor's degree in Computer Science, Software Engineering, or equivalent work experience 
• Effective verbal and written communication skills 

Nice to Have 

• Experience writing custom Terraform providers 
• Contributions to open-source security or infrastructure tooling 
• Experience with Open Policy Agent (OPA) or other policy-as-code frameworks 
• Familiarity with SPIFFE/SPIRE for workload identity 
• Experience with PKI automation and certificate lifecycle management