Lead Platform Engineer

Department Description:

At Disney, we’re storytellers. We make the impossible, possible. The Walt Disney Company is a world-class entertainment and technological leader. Walt’s passion was to continuously envision new ways to move audiences around the world—a passion that remains our touchstone in an enterprise that stretches from theme parks, resorts and a cruise line to sports, news, movies and a variety of other businesses. Uniting each endeavor is a commitment to creating and delivering unforgettable experiences — and we’re constantly looking for new ways to enhance these exciting experiences.

The Enterprise Technology mission is to deliver technology solutions that align to business strategies while enabling enterprise efficiency and promoting cross-company collaborative innovation. The Enterprise Technology organization drives competitive advantage by enhancing our consumer experiences, enabling business growth, and advancing operational excellence.

Team Description:

The Identity and Access Management (IAM) Engineering team is hiring talented contributors for innovative projects that will help power and secure our businesses and guest experiences. Leverage your solutions integrations knowledge, industry experience, and your passion for new technologies and platforms. You will be part of a diverse cross-functional team with ownership at the core of its DNA.

The IAM group's core mission is providing a Core IAM ecosystem of security services, platforms, and solutions in use across the company by cast members, employees, and partners within Disney’s business segments (DEE&T, DX, Studios) and corporate functions. Our vision is to provide advanced Identity and Access Management capabilities and services that are simple, seamless, and secure to protect our workforce, our data, and our brands.

We are looking for a Lead Platform Engineer to join our Team!

Responsibilities of Role:

• Responsible for the integration, implementation, and transformation of vendor-based Identity and Access Management (IAM) products and platforms that support cast members, and employees, and partners of Disney. 

• Plans, validates, and executes on deliverables for technical integration and implementation of our IAM services in coordination with IAM domain architects, service managers/owners, software engineers, and our operations teams.

• In collaboration with domain architects, defines / maintains all aspects of the platform engineering process including service / product technical evaluation process, lab testing, and service solution design.

• Works closely with architects, service owners to ensure alignment with Enterprise Technology strategies, standards and policies. 

• Contributes to the platform/solutions engineering efforts for vendor-provided Enterprise IAM products and services. This includes:  Active participant in IAM Transformation program and projects on a cross-functional team to progressively drive and execute on the lifecycle (adopt, evolve, retire/transform) of our IAM services at Disney

• Evaluates capabilities of services / products and designs solutions/plans to deliver technology-current and business-aligned service offerings that evolve our cybersecurity defense, and embrace both best practices and common standards

• Identifying and implementing changes to the environment that equip both application owners and end users with an awesome IAM experience

• Collaborates closely with software engineering teams in support of their custom developed solutions and products that integrate with vendor platforms

• Communicating, project tracking, and status reporting on efforts as a participant on project and service teams

• Establishes close relationships with and provides oversight of vendor and supplier partners

• Maintains strong knowledge of emerging technologies and trends

• Develops scripts to aid in automation and operations of service offerings

• Recommend and integrate solutions to increase effectiveness and efficiency of solution architecture and engineering to further enhance support capabilities, documentation and reporting.

Must Haves:

• Minimum of 7 years of relevant experience in IT / Enterprise Technology supporting identity and access, enterprise platforms

• 5+ years of experience managing SailPoint at scale within a medium-to-large enterprise environment.

• 5+ years of experience with implementing or maintaining large-scale identity and access management solutions, experienced in: Products/Vendors: SailPoint, SGNL, Okta, Active Directory, Entra ID

• 3+ years providing technical leadership and oversight to other engineers

• 3+ years’ experience in contributing to large, transformational IT initiatives 

• 2+ years’ experience working with suppliers in an outsourced environment

• Identity Lifecycle Management, HCM (e.g., SAP, Workday) and IAM Data Integration

• Protocols/Standards such as SCIM, OAuth2, SAML, OIDC, LDAP

• Experience automating access provisioning and deprovisioning

• Familiarity with Zero Standing Access concepts and policy-based access management

• Experience automating common operational tasks, web service/API integration, and deployment activities in scripting/programming languages (Python, JavaScript, PowerShell)

• Understand security concerns within application (password hashing, SSL/TLS, encryption at rest, XSS, XSRF)

• Expertise with Agile methodologies and delivering solutions through sprint planning activities

Nice To Haves:

• Solid grasp with critical data handling such as SOX, PCI and PII, Safe Harbor

• SailPoint Certification

• SGNL Practitioner Certification

• Professional certifications in other identity and access management platforms and products (Active Directory, Okta)

• CISSP/Security Certifications

Education:

• Bachelor’s degree in Information Technology, Information Security, Computer Science, or Business related field or equivalent proven work experience

#DISNEYTECH

The hiring range for this position in Burbank, California is $126,400 - $169,500 per year and in Seattle, WA is $132,500 - $177,600. The base pay actually offered will take into account internal equity and also may vary depending on the candidate’s geographic region, job-related knowledge, skills, and experience among other factors. A bonus and/or long-term incentive units may be provided as part of the compensation package, in addition to the full range of medical, financial, and/or other benefits, dependent on the level and position offered.