Senior Platform Engineer

Department

Description:

At Disney, we’re storytellers. We make the impossible, possible. The Walt Disney Company is a world-class entertainment and technological leader. Walt’s passion was to continuously envision new ways to move audiences around the world—a passion that remains our touchstone in an enterprise that stretches from theme parks, resorts and a cruise line to sports, news, movies and a variety of other businesses.

Uniting each endeavor is a commitment to creating and delivering unforgettable experiences — and we’re constantly looking for new ways to enhance these exciting experiences.

The Enterprise Technology mission is to deliver technology solutions that align to business strategies while enabling enterprise efficiency and promoting cross-company collaborative innovation. The Enterprise Technology organization drives competitive advantage by enhancing our consumer experiences, enabling business growth, and advancing operational excellence.

The
Identity and Access Management (IAM) Engineering team
is hiring talented contributors for innovative projects that will help power and secure our businesses and guest experiences. Leverage your solutions integrations knowledge, industry experience, and your passion for new technologies and platforms. You will be part of a diverse cross-functional team with ownership at the core of its DNA.

The IAM group's core mission is providing a Core IAM ecosystem of security services, platforms, and solutions in use across the company by cast members, employees, and partners within Disney’s business segments (DEE&T, DX, Studios) and corporate functions. Our vision is to provide advanced Identity and Access Management capabilities and services that are simple, seamless, and secure to protect our workforce, our data, and our brands.

• Design, build, maintain and automate an IAM security solution within a vendor-provided enterprise IAM service/platform protecting thousands of internal applications and data of hundreds of thousands of cast members, employees, and partners of Disney.
• Recommends and implements solutions for the technical integration and implementation of our IAM services in coordination with IAM domain architects, team lead, service leads, software engineers, and our operations teams.
• In collaboration with domain architects and team leads to defines/maintains all aspects of the platform engineering process including service/product technical evaluation process, lab testing, and service solution design.
• Accountable for ensuring all security and compliance standards are upheld as the service delivery team including remediating vulnerabilities, driving compliance evidence collection, and following all change management processes while also providing on call support and incident response and RCA.
• Evaluates capabilities of new security services/functionality and crafts solutions to deliver technology-current and business-aligned platform offerings that evolve our cybersecurity defense and upgrade our security posture.
• Collaborates closely with software engineering teams in support of their custom developed solutions and products that integrate with vendor platforms.
• Maintains strong knowledge of emerging technologies and trends.

• Minimum of 5 years of experience in IT Enterprise Technology, supporting identity and access (IAM), enterprise platforms, and/or collaboration ecosystems within diverse enterprises.
• 3+ years providing technical leadership and mentorship to other engineers.
• 3+ years of confirmed running Okta at scale within a medium-to-large enterprise environment.
• 3+ years of consistent record with implementing or maintaining large-scale identity and access management solutions, experienced in:
  Products/Vendors:
  SailPoint, SGNL, Okta, Active Directory, Entra .
• 2+ years’ experience working with suppliers in an outsourced environment.
• Identity Lifecycle Management, HCM (e.g., SAP, Workday) and IAM Data Integration.
• Protocols/Standards such as SCIM, OAuth2, SAML, OIDC, LDAP.
• Experience automating access provisioning and deprovisioning.
• Familiarity with zero standing access concepts and policy-based access…