Software Engineer, Zero Trust - Amsterdam

What To Expect As a Zero Trust Software Engineer, you will design and build the software, automation, and tooling that powers Tesla's global Zero Trust infrastructure at scale. You will develop platform integrations, infrastructure-as-code modules, APIs, automation pipelines, and custom tooling that enable Tesla's Zero Trust platforms to be deployed, configured, monitored, and operated programmatically. This is a hands-on engineering role requiring strong proficiency in Terraform, Python, Go, and/or PowerShell, with the ability to build production-grade software that operates Tesla's security infrastructure. What You'll Do - Design and develop infrastructure-as-code (Terraform) modules for provisioning and managing Zero Trust platform resources (Zscaler, Akamai Guardicore, Teleport, Azure AD/Entra ID) - Build and maintain CI/CD pipelines for Zero Trust infrastructure deployment, configuration changes, and policy updates with automated validation and rollback - Develop custom APIs and microservices (Go, Python) that integrate Zero Trust platforms with Tesla's internal systems, identity providers, and security tooling - Create automation frameworks (Python, PowerShell) for operational tasks: user provisioning, policy deployment, certificate management, log aggregation, and compliance reporting - Build monitoring and observability tooling, including custom Grafana dashboards, Prometheus exporters, and Splunk integrations for Zero Trust platform telemetry - Develop self-service tooling that enables teams across Tesla to request, configure, and manage Zero Trust access without manual intervention - Write and maintain PowerShell modules for Windows-based Zero Trust operations, Active Directory integrations, and endpoint configuration management - Implement automated testing frameworks for Zero Trust policy validation, ensuring policy changes do not introduce access regressions - Contribute to internal developer platforms and SDKs that abstract Zero Trust platform APIs for consumption by other engineering teams - Perform code reviews, maintain documentation, and follow software engineering best practices (version control, testing, observability, secure coding) - Collaborate with Systems and Network Engineering teams to translate operational requirements into automated, repeatable solutions - Participate in 24/7 on-call rotation as required What You'll Bring - 5+ years of software engineering experience with production systems - Strong proficiency in at least two of the following: Terraform, Python, Go, PowerShell; working knowledge of the others - 3+ years of experience building automation and tooling for security or infrastructure platforms - Experience with infrastructure-as-code at scale (Terraform providers, modules, state management, CI/CD integration) - Proficiency with API development (REST, gRPC) and integration patterns (webhooks, event-driven, message queues) - Experience with CI/CD platforms (GitHub Actions, GitLab CI, Jenkins, ArgoCD) and GitOps workflows - Familiarity with Zero Trust Architecture principles and at least one Zero Trust platform (Zscaler, Guardicore, Cloudflare Access, Palo Alto Prisma) - Experience with cloud platforms (Azure, AWS, GCP) and their IAM/networking primitives - Proficiency with containerization (Docker, Kubernetes) and container orchestration - Experience with monitoring and observability stacks (Prometheus, Grafana, Splunk, ELK) - Strong understanding of identity protocols (SAML, OIDC, OAuth2, SCIM) and directory services (Active Directory, Azure AD/Entra ID) - Experience with version control (Git), code review practices, and automated testing - Bachelor's degree in Computer Science, Software Engineering, or equivalent work experience - Effective verbal and written communication skills Nice to Have - Experience writing custom Terraform providers - Contributions to open-source security or infrastructure tooling - Experience with Open Policy Agent (OPA) or other policy-as-code frameworks - Familiarity with SPIFFE/SPIRE for workload identity - Experience with PKI automation and certificate lifecycle management , Tesla