Staff Engineer, DevSecOps - IAM

Sirius XM Canada - Atlanta, GA

Full-time - Senior

Atlanta, GA

About the position

The Staff Engineer, DevSecOps - IAM at SiriusXM will play a crucial role in enhancing and maintaining Identity and Access Management (IAM) features for the connected vehicle software platform. This position involves collaborating with cross-functional teams to design and build scalable IAM solutions, ensuring system stability and performance while providing technical guidance to other engineers. The role is integral to delivering safety, security, and convenience services to subscribers, contributing to the overall mission of SiriusXM in the audio entertainment industry.

Responsibilities

• Work effectively in a DevSecOps team environment and collaborate with cross-functional teams.
• Lead high-level architecture discussions and planning sessions.
• Design and build high-performance, stable, scalable IAM solutions to support business needs and to be deployed in an enterprise setting.
• Provide technical guidance and mentorship to other engineers.
• Maintain and support existing IAM systems, ensuring high availability and performance.
• Develop and enforce IAM policies, standards, and procedures.
• Develop and maintain dashboards, alerts, and visualizations to provide actionable insights for the team.
• Demonstrates a deep understanding of agile processes and feedback.
• Drives accountability within the team for operational excellence and a delightful customer experience.

Requirements

• 7+ years of experience with a Bachelor's Degree in Engineering, Computer Science, Information Systems, or other technically related field; or 5+ years with a Master's Degree.
• In-depth knowledge of cloud computing principles and best practices.
• Proficiency in languages such as Java, Python, JavaScript; Spring Boot based Microservices.
• Experience with IAM in cloud environments (e.g., AWS, Azure, Google Cloud), AWS preferred.
• Using infrastructure as code AWS CloudFormation, Ansible, Terraform, AWS CDK, preferably AWS CloudFormation and CDK.
• Extensive experience with IAM solutions and frameworks, such as LDAP, SAML, OAuth, OpenID Connect, and others.
• In-depth knowledge of authentication and authorization protocols (e.g., SSO, MFA, RBAC, ABAC).
• Strong understanding of directory services like Active Directory, LDAP.
• Experience in developing and integrating with RESTful APIs for IAM functionalities.
• Deep understanding of security best practices and frameworks.
• Expertise with IAM platforms (e.g., Okta, SailPoint, ForgeRock/Ping Identity, Microsoft Azure AD).
• Have played a lead role in software development projects in the cloud (preferably AWS).
• Passion for identifying and building new tools and technologies to solve complex problems.
• Strong technical knowledge building mission critical/highly available service-oriented software.
• Experience on automated testing of APIs.
• Experience working on Relational and NoSQL databases.
• Repository management using Git, Bitbucket; building CICD pipelines using Jenkins, Ansible or similar orchestration tool.
• Experience with monitoring tools such as CloudWatch, ELK Stack.
• Strong analytical and troubleshooting skills.
• Excellent verbal and written communication skills.
• Experience on AWS cloud platform services such as EC2, S3, RDS, Lambda, VPC, Route53 CloudFormation, IAM, KMS, and others is a huge plus.

Nice-to-haves

• Knowledge of new cutting-edge security technologies and practices is a plus.
• Knowledge of vehicle head unit and how Safety Services works in auto industry is a plus.