Staff Engineer, DevSecOps - IAM

Who We Are :

Apply below after reading through all the details and supporting information regarding this job opportunity.

SiriusXM and its brands (Pandora, SiriusXM Media, AdsWizz, Simplecast, and SiriusXM Connect) are leading a new era of audio entertainment and services by delivering the most compelling subscription and ad-supported audio entertainment experience for listeners in the car, at home, and anywhere on the go with connected devices.

Our vision is to shape the future of audio, where everyone can be effortlessly connected to the voices, stories and music they love wherever they are.

This is the place where a diverse group of emerging talent and legends alike come to share authentic and purposeful songs, stories, sounds and insights through some of the best programming and technology in the world.

Our critically acclaimed, industry-leading audio entertainment encompasses music, sports, comedy, news, talk, live events, and podcasting.

No matter their individual role, each of our employees plays a vital part in bringing SiriusXM's vision to life every day.

SiriusXM Connect (SiriusXM CV) is a leading provider of connected services to vehicle manufacturers, delivering one of the most broadly adopted connected vehicle platforms in North America for the last 25 years.

Named the 2020 Company of the Year in the Telematics Industry by Frost & Sullivan, we provide safety, security and convenience services to millions of vehicle owners across major automotive brands.

Our teams are continuously working to develop leading-edge technology that can not only add convenience to the daily lives of so many drivers across the country but our advancements in safety and security could also help save their lives.

How you'll make an impact :

The Connected Vehicle Services division of SiriusXM builds and delivers software-based services on our connected vehicle platform that not only adds convenience to the daily life of our subscribers, but safety and security as well;

when the worst happens, our software helps to save lives.

We are seeking a talented, driven Staff Engineer to join our team to help us enhance, extend, and maintain the Identity and Access Management features for our connected vehicle software platform as we expand our offerings in safety, security and convenience to take our business to the next level.

In this role, you will be part of a high-performing team of engineers that build, own, and maintain Identity and Access Management services ensuring the stability, performance, and reliability of our systems.

What you'll do :

• Work effectively in a DevSecOps team environment and collaborate with cross-functional teams.
• Lead high-level architecture discussions and planning sessions.
• Design and build high-performance, stable, scalable IAM solutions to support business needs and to be deployed in an enterprise setting.
• Provide technical guidance and mentorship to other engineers.
• Maintain and support existing IAM systems, ensuring high availability and performance.
• Develop and enforce IAM policies, standards, and procedures.
• Develop and maintain dashboards, alerts, and visualizations to provide actionable insights for the team.
• Demonstrates a deep understanding of agile processes and feedback.
• Drives accountability within the team for operational excellence and a delightful customer experience.

What you'll need :

7+ years of experience with a Bachelor's Degree in Engineering, Computer Science, Information Systems, or other technically related field;

or 5+ years with a Master's Degree.

• In-depth knowledge of cloud computing principles and best practices.
• Proficiency in languages such as Java, Python, JavaScript; Spring Boot based Microservices.
• Experience with IAM in cloud environments (e.g., AWS, Azure, Google Cloud), AWS preferred.
• Using infrastructure as code AWS CloudFormation, Ansible, Terraform, AWS CDK, preferably AWS CloudFormation and CDK.
• Extensive experience with IAM solutions and frameworks, such as LDAP, SAML, OAuth, OpenID Connect, and others.
• In-depth knowledge of authentication and authorization protocols (e.g., SSO, MFA, RBAC, ABAC).
• Strong understanding of directory services like Active Directory, LDAP.
• Experience in developing and integrating with RESTful APIs for IAM functionalities.
• Deep understanding of security best practices and frameworks.
• Expertise with IAM platforms (e.g., Okta, SailPoint, ForgeRock / Ping Identity, Microsoft Azure AD).
• Have played a lead role in software development projects in the cloud (preferably AWS).
• Passion for identifying and building new tools and technologies to solve complex problems.
• Strong technical knowledge building mission critical / highly available service-oriented software.
• Experience on automated testing of APIs.
• Experience working on Relational and NoSQL databases.
• Repository management using Git, Bitbucket; building CICD pipelines using Jenkins, Ansible or similar orchestration tool.
• Experience with monitoring tools such as CloudWatch, ELK Stack.
• Strong analytical and troubleshooting skills.
• Excellent verbal and written communication skills.
• Experience on AWS cloud platform services such as EC2, S3, RDS, Lambda, VPC, Route53 CloudFormation, IAM, KMS, and others is a huge plus.
• Knowledge of new cutting-edge security technologies and practices is a plus.
• Knowledge of vehicle head unit and how Safety Services works in auto industry is a plus.
• Must have legal right to work in the U.S.

Our goal at SiriusXM is to provide and maintain a work environment that fosters mutual respect, professionalism, and cooperation.

SiriusXM is an equal opportunity employer that does not discriminate based on actual or perceived race, creed, color, religion, national origin, ancestry, alienage or citizenship status, age, disability or handicap, sex, gender identity, marital status, familial status, veteran status, sexual orientation or any other characteristic protected by applicable federal, state or local laws.

The requirements and duties described above may be modified or waived by the Company in its sole discretion without notice.

J-18808-Ljbffr