> Markdown version of [/jobs/ext/2266963-software-engineer-zero-trust](https://www.wearedevelopers.com/jobs/ext/2266963-software-engineer-zero-trust). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Software Engineer, Zero Trust - **Company:** Tesla Motors - **Location:** Palo Alto, CA, United States - **Experience:** Expert - **Salary:** $140,000.0 - $252,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Access, Microsoft Windows, Active Directory, Application Programming Interfaces (APIs), Amazon Web Services, Automation of Tests, Microsoft Azure, Cyber Security, Continuous Integration, Github, Monitoring of Systems, Identity and Access Management, Python (Programming Language), OAuth, OpenID, Windows PowerShell, Prometheus, Zero Trust Network Access, Security Assertion Markup Language (SAML), Secure Coding, Software Engineering, Delivery Pipeline, Grafana, Git, Gitlab-ci, Kubernetes, Information Technology, Cloudflare, Api Design, Terraform, Splunk, Webhooks, Docker, Jenkins, Golang, Microservices - **Published:** August 27, 2026 - **Apply:** https://jobs.localjobnetwork.com/apply/add/88160714/1 ## About the Role * 5+ years of software engineering experience with production systems * Strong proficiency in at least two of the following: Terraform, Python, Go, PowerShell; working knowledge of the others * 3+ years building automation and tooling for security or infrastructure platforms * Experience with infrastructure-as-code at scale (providers, modules, state management, CI/CD integration) * Proficiency with API development (REST and/or gRPC) and common integration patterns (webhooks, events, queues) * Experience with CI/CD platforms (GitHub Actions, GitLab CI, Jenkins, and/or ArgoCD) and GitOps workflows * Familiarity with Zero Trust principles and at least one Zero Trust platform (Zscaler, Guardicore, Cloudflare Access, Palo Alto Prisma, or equivalent) * Experience with cloud platforms (Azure, AWS, and/or GCP) and their IAM/networking primitives; proficiency with containers (Docker/Kubernetes) * Experience with observability stacks (Prometheus, Grafana, Splunk, and/or ELK) and identity protocols/directories (SAML, OIDC, OAuth2, SCIM, AD/Entra ID) * Degree in Computer Science, Software Engineering, or equivalent experience; solid Git/code-review/testing practices and clear communication ## Description As a Zero Trust Software Engineer, you will design and build the software, automation, and tooling that powers Tesla's global Zero Trust infrastructure at scale. You will develop platform integrations, infrastructure-as-code modules, APIs, automation pipelines, and custom tooling that enable Tesla's Zero Trust platforms to be deployed, configured, monitored, and operated programmatically. This is a hands-on engineering role requiring strong proficiency in Terraform, Python, Go, and/or PowerShell, with the ability to build production-grade software that operates Tesla's security infrastructure. What You'll Do * Design and develop Terraform / IaC modules for provisioning and managing Zero Trust platform resources (Zscaler, Guardicore, Teleport, Entra ID) * Build and maintain CI/CD pipelines for Zero Trust infrastructure and policy changes with automated validation and rollback * Develop APIs and microservices (Go and/or Python) that integrate Zero Trust platforms with internal systems, identity providers, and security tooling * Create automation frameworks (Python and/or PowerShell) for operational tasks: provisioning, policy deployment, certificates, log aggregation, and compliance reporting * Build monitoring and observability for Zero Trust platforms (Grafana, Prometheus exporters, Splunk integrations) * Develop self-service tooling so Tesla teams can request, configure, and manage Zero Trust access without manual intervention * Write and maintain PowerShell modules for Windows Zero Trust operations, Active Directory integrations, and endpoint configuration where required * Implement automated testing for Zero Trust policy and infrastructure changes to prevent access regressions * Contribute to internal platforms/SDKs that abstract Zero Trust APIs for other engineering teams; follow engineering best practices (reviews, docs, testing, secure coding) * Partner with Systems and Network Engineering to turn operational needs into automated, repeatable solutions; participate in 24/7 on-call as required ## Related Videos - [How a Small Team Shrank a Microsoft Monorepo by 94%](https://www.wearedevelopers.com/videos/1236-how-a-small-team-shrank-a-microsoft-monorepo-by-94) - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Go with the Flow: Stop the Leaks Before Your Memory's a Waterfall!](https://www.wearedevelopers.com/videos/100073-go-with-the-flow-stop-the-leaks-before-your-memory-s-a-waterfall) - [Trust Issues: Because Zero-Trust Isn’t Optional Anymore](https://www.wearedevelopers.com/videos/100089-trust-issues-because-zero-trust-isn-t-optional-anymore) - [Scoring 2000 Products per Request: Performance Pitfalls in Golang](https://www.wearedevelopers.com/videos/2073-scoring-2000-products-per-request-performance-pitfalls-in-golang) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) ## Related Articles - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [Dev Digest 129 - Now that's what I call private data!](https://www.wearedevelopers.com/magazine/468-dev-digest-129-now-that-s-what-i-call-private-data) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)