Job Summary:

The Enterprise Technology mission is to deliver technology solutions that align to business strategies while enabling enterprise efficiency and promoting cross-company collaborative innovation. The Enterprise Technology organization drives our competitive advantage by enhancing consumer experiences, enabling business growth, and advancing operational excellence. Enterprise Technology is guided by the principles of being service focused and collaborative, being biased for action and innovation, and being efficient through leverage of TWDC scale and through continuous improvement.

Disney’s Enterprise Technology Identity and Access Management (IAM) group is responsible for providing a Core IAM ecosystem of products and platforms in use across the company by cast members, employees, and partners within Disney’s business segments (DMED, DPEP, Studios, DGE) and Corporate functions. Our vision is to provide modern Identity and Access Management capabilities and services that are simple, seamless, and secure to protect our workforce, our data, and our brands. Our teams are located in Orlando FL, Burbank CA, and Seattle WA - and we will consider a Hybrid role in any of these locations.

Responsibilities:

Our Sr Platform Engineer will be responsible for the integration, implementation, and transformation of vendor-based Identity and Access Management (IAM) products and platforms that support cast members, and employees, and partners of Disney. This role would plan, validate, and execute on deliverables for technical integration and implementation of our IAM services in coordination with IAM domain architects, service managers/owners, software engineers, and our operations teams.

In collaboration with domain architects, you would help define/maintain all aspects of the platform engineering process including service/product technical evaluation process, lab testing, and service solution design. This would also include working closely with architects and service owners to ensure alignment with Enterprise Technology strategies, standards and policies - closely coordinating with other teams who are part of the process.

Other responsibilities would include contributing to the platform/solutions engineering efforts for vendor-provided Enterprise IAM products and services. This includes:

Being an active participant in IAM Transformation program and projects on a cross-functional team to progressively drive and execute on the lifecycle (adopt, evolve, retire/transform) of our IAM services at Disney

Evaluating capabilities of services/products and designs solutions/plans to deliver technology-current and business-aligned service offerings that evolve our cybersecurity defense, and embrace both best practices and common standards

Identifying and implementing changes to the environment that equip both application owners and end users with a great IAM experience

Collaborating closely with software engineering teams in support of their custom developed solutions and products that integrate with vendor platforms

Communicating, project tracking, and status reporting on efforts as a participant on project and service teams, and working closely with vendor and supply partners

Maintaining strong knowledge of emerging technologies and trends - recommending solutions to increase effectiveness of architecture & engineering

Developing scripts to aid in automation and operations of service offerings

Basic Qualifications:

5-7 years supporting identity and access, enterprise platforms, and/or collaboration ecosystems within diverse enterprises, preferably within transformation IT initiatives & working with suppliers in an outsourced environment

3+ years of experience implementing or maintaining large-scale identity and access management solutions. Experience in these areas could include:

Products/Vendors: Active Directory (AzureAD/AD), Okta, Ping, Azure AD, SailPoint, BeyondTrust, Siteminder

Single Sign-On, Multi-Factor Authentication (MFA), PAM, IGA

Identity Federation, SSO, HCM (e.g., SAP, Workday) and IAM Data Integration

Protocols/Standards such as SAML, SCIM, OAuth2, OIDC, LDAP, FIDO2, Kerberos

Certificate lifecycle and integration

Cross-functional technology skills in areas such as public cloud, SaaS and on-prem applications and platforms, devices, and remote access

Well-versed in data analysis and reporting - comfortable in intermediate level use of Excel and either Tableau or Power B; familiarity in using scripting languages for data analysis

Experience automating common operational tasks, web service/API integration, and deployment activities in scripting/programming languages (e.g. Python, PowerShell, JavaScript, etc.)

An understanding of core security concerns within a typical application (password hashing, SSL/TLS, encryption at rest, XSS, XSRF)

Excellent written, verbal, and visual communication - able to work collaboratively, establish credibility, and connect with all partners (leadership, engineers, end users, application owners, etc.)

Good organizational, detail, analytical and problem-solving skills

Proven strong negotiating and consensus building activities

Expertise with Agile methodologies and ITIL concepts

Preferred Qualifications:

Hands-on experience in one or more of the following areas is a plus: web development (JavaScript, HTML, frontend frameworks), middle-tier/backend development (Java, C#, Node.js, Python, PHP, Ruby), IP-based real-time communications

Extensive experience with Active Directory, Okta, and SiteMinder

Familiarity with deployments and integration of IAM solutions with public cloud providers (Azure, AWS, Google Cloud)

Required Education

BS or BA degree in Information Technology, Information Security, Computer Science, or Business related field or equivalent proven work experience

Preferred Education

Professional certifications in Okta, Active Directory, or Ping Identity products

CISSP or other Security Certification/s