Software Engineer, Zero Trust

Zero Trust Software EngineerAs a Zero Trust Software Engineer, you will design and build the software, automation, and tooling that powers Tesla's global Zero Trust infrastructure at scale. You will develop platform integrations, infrastructure-as-code modules, APIs, automation pipelines, and custom tooling that enable Tesla's Zero Trust platforms to be deployed, configured, monitored, and operated programmatically. This is a hands-on engineering role requiring strong proficiency in Terraform, Python, Go, and/or PowerShell, with the ability to build production-grade software that operates Tesla's security infrastructure.ResponsibilitiesDesign and develop Terraform / IaC modules for provisioning and managing Zero Trust platform resources (Zscaler, Guardicore, Teleport, Entra ID)Build and maintain CI/CD pipelines for Zero Trust infrastructure and policy changes with automated validation and rollbackDevelop APIs and microservices (Go and/or Python) that integrate Zero Trust platforms with internal systems, identity providers, and security toolingCreate automation frameworks (Python and/or PowerShell) for operational tasks: provisioning, policy deployment, certificates, log aggregation, and compliance reportingBuild monitoring and observability for Zero Trust platforms (Grafana, Prometheus exporters, Splunk integrations)Develop self-service tooling so Tesla teams can request, configure, and manage Zero Trust access without manual interventionWrite and maintain PowerShell modules for Windows Zero Trust operations, Active Directory integrations, and endpoint configuration where requiredImplement automated testing for Zero Trust policy and infrastructure changes to prevent access regressionsContribute to internal platforms/SDKs that abstract Zero Trust APIs for other engineering teams; follow engineering best practices (reviews, docs, testing, secure coding)Partner with Systems and Network Engineering to turn operational needs into automated, repeatable solutions; participate in 24/7 on-call as requiredRequirements5+ years of software engineering experience with production systemsStrong proficiency in at least two of the following: Terraform, Python, Go, PowerShell; working knowledge of the others3+ years building automation and tooling for security or infrastructure platformsExperience with infrastructure-as-code at scale (providers, modules, state management, CI/CD integration)Proficiency with API development (REST and/or gRPC) and common integration patterns (webhooks, events, queues)Experience with CI/CD platforms (GitHub Actions, GitLab CI, Jenkins, and/or ArgoCD) and GitOps workflowsFamiliarity with Zero Trust principles and at least one Zero Trust platform (Zscaler, Guardicore, Cloudflare Access, Palo Alto Prisma, or equivalent)Experience with cloud platforms (Azure, AWS, and/or GCP) and their IAM/networking primitives; proficiency with containers (Docker/Kubernetes)Experience with observability stacks (Prometheus, Grafana, Splunk, and/or ELK) and identity protocols/directories (SAML, OIDC, OAuth2, SCIM, AD/Entra ID)Degree in Computer Science, Software Engineering, or equivalent experience; solid Git/code-review/testing practices and clear communicationCompensation & BenefitsBenefitsAlong with competitive pay, as a full-time Tesla employee, you are eligible for the following benefits at day 1 of hire:Medical plans > plan options with $0 payroll deductionFamily-building, fertility, adoption and surrogacy benefitsDental (including orthodontic coverage) and vision plans, both have options with a $0 paycheck contributionCompany Paid (Health Savings Accounts) HSA Contribution when enrolled in the High-Deductible medical plan with HSAHealthcare and Dependent Care Flexible Spending Accounts (FSA)401(k) with employer match, Employee Stock Purchase Plans, and other financial benefitsCompany paid Basic Life, AD&DShort-term and long-term disability insurance (90 day waiting period)Employee Assistance ProgramSick and Vacation time (Flex time for salary positions, Accrued hours for Hourly positions), and Paid HolidaysBack-up childcare and parenting support resourcesVoluntary benefits to include: critical illness, hospital indemnity, accident insurance, theft & legal services, and pet insuranceWeight Loss and Tobacco Cessation ProgramsTesla Babies programCommuter benefitsEmployee discounts and perks programExpected Compensation $140,000 - $252,000/annual salary + cash and stock awards + benefitsPay offered may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, and experience.

The total compensation package for this position may also include other elements dependent on the position offered. Details of participation in these benefit plans will be provided if an employee receives an offer of employment.