> Markdown version of [/jobs/ext/4051854-software-engineer-zero-trust-amsterdam](https://www.wearedevelopers.com/jobs/ext/4051854-software-engineer-zero-trust-amsterdam). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Software Engineer, Zero Trust - Amsterdam

- **Company:** Tesla
- **Location:** Amsterdam, Netherlands
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Microsoft Access, Microsoft Windows, Active Directory, Application Programming Interfaces (APIs), Amazon Web Services, Automation of Tests, Microsoft Azure, Code Review, Cyber Security, Continuous Integration, Github, Monitoring of Systems, Identity and Access Management, Python (Programming Language), OAuth, Octopus Deploy, Open Source Technology, OpenID, Public Key Infrastructure, Windows PowerShell, Queueing Systems, Azure Active Directory, Prometheus, Akamai, Zero Trust Network Access, Security Assertion Markup Language (SAML), Secure Coding, Software Construction, Software Engineering, User Provisioning Software, Policy as Code, SSL Certificate Management, Google Cloud, Delivery Pipeline, Grafana, Git, Containerization, Gitlab-ci, Kubernetes, Information Technology, Cloudflare, Api Design, Terraform, Splunk, Webhooks, Software Version Control, Docker, Jenkins, Golang, Microservices
- **Published:** October 22, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=e693d9695fa6d093

## About the Role

* 5+ years of software engineering experience with production systems
 * Strong proficiency in at least two of the following: Terraform, Python, Go, PowerShell; working knowledge of the others
 * 3+ years of experience building automation and tooling for security or infrastructure platforms
 * Experience with infrastructure-as-code at scale (Terraform providers, modules, state management, CI/CD integration)
 * Proficiency with API development (REST, gRPC) and integration patterns (webhooks, event-driven, message queues)
 * Experience with CI/CD platforms (GitHub Actions, GitLab CI, Jenkins, ArgoCD) and GitOps workflows
 * Familiarity with Zero Trust Architecture principles and at least one Zero Trust platform (Zscaler, Guardicore, Cloudflare Access, Palo Alto Prisma)
 * Experience with cloud platforms (Azure, AWS, GCP) and their IAM/networking primitives
 * Proficiency with containerization (Docker, Kubernetes) and container orchestration
 * Experience with monitoring and observability stacks (Prometheus, Grafana, Splunk, ELK)
 * Strong understanding of identity protocols (SAML, OIDC, OAuth2, SCIM) and directory services (Active Directory, Azure AD/Entra ID)
 * Experience with version control (Git), code review practices, and automated testing
 * Bachelor's degree in Computer Science, Software Engineering, or equivalent work experience
 * Effective verbal and written communication skills

Nice to Have

 * Experience writing custom Terraform providers
 * Contributions to open-source security or infrastructure tooling
 * Experience with Open Policy Agent (OPA) or other policy-as-code frameworks
 * Familiarity with SPIFFE/SPIRE for workload identity
 * Experience with PKI automation and certificate lifecycle management

## Description

* Design and develop infrastructure-as-code (Terraform) modules for provisioning and managing Zero Trust platform resources (Zscaler, Akamai Guardicore, Teleport, Azure AD/Entra ID)
 * Build and maintain CI/CD pipelines for Zero Trust infrastructure deployment, configuration changes, and policy updates with automated validation and rollback
 * Develop custom APIs and microservices (Go, Python) that integrate Zero Trust platforms with Tesla's internal systems, identity providers, and security tooling
 * Create automation frameworks (Python, PowerShell) for operational tasks: user provisioning, policy deployment, certificate management, log aggregation, and compliance reporting
 * Build monitoring and observability tooling, including custom Grafana dashboards, Prometheus exporters, and Splunk integrations for Zero Trust platform telemetry
 * Develop self-service tooling that enables teams across Tesla to request, configure, and manage Zero Trust access without manual intervention
 * Write and maintain PowerShell modules for Windows-based Zero Trust operations, Active Directory integrations, and endpoint configuration management
 * Implement automated testing frameworks for Zero Trust policy validation, ensuring policy changes do not introduce access regressions
 * Contribute to internal developer platforms and SDKs that abstract Zero Trust platform APIs for consumption by other engineering teams
 * Perform code reviews, maintain documentation, and follow software engineering best practices (version control, testing, observability, secure coding)
 * Collaborate with Systems and Network Engineering teams to translate operational requirements into automated, repeatable solutions
 * Participate in 24/7 on-call rotation as required