Staff Engineer, DevSecOps - IAM

Sirius XM Canada - Farmington Hills, MI

Full-time - Mid Level

Farmington Hills, MI

About the position

The Staff Engineer, DevSecOps - IAM at SiriusXM will play a crucial role in enhancing and maintaining Identity and Access Management (IAM) features for the connected vehicle software platform. This position involves collaborating with cross-functional teams to design and build scalable IAM solutions, ensuring system stability and performance while providing technical guidance to other engineers. The role is integral to delivering software-based services that enhance safety, security, and convenience for subscribers.

Responsibilities

• Work effectively in a DevSecOps team environment and collaborate with cross-functional teams.
• Lead high-level architecture discussions and planning sessions.
• Design and build high-performance, stable, scalable IAM solutions to support business needs and to be deployed in an enterprise setting.
• Provide technical guidance and mentorship to other engineers.
• Maintain and support existing IAM systems, ensuring high availability and performance.
• Develop and enforce IAM policies, standards, and procedures.
• Develop and maintain dashboards, alerts, and visualizations to provide actionable insights for the team.
• Demonstrates a deep understanding of agile processes and feedback.
• Drives accountability within the team for operational excellence and a delightful customer experience.

Requirements

• 7+ years of experience with a Bachelor's Degree in Engineering, Computer Science, Information Systems, or other technically related field; or 5+ years with a Master's Degree.
• In-depth knowledge of cloud computing principles and best practices.
• Proficiency in languages such as Java, Python, JavaScript; Spring Boot based Microservices.
• Experience with IAM in cloud environments (e.g., AWS, Azure, Google Cloud), AWS preferred.
• Using infrastructure as code AWS CloudFormation, Ansible, Terraform, AWS CDK, preferably AWS CloudFormation and CDK.
• Extensive experience with IAM solutions and frameworks, such as LDAP, SAML, OAuth, OpenID Connect, and others.
• In-depth knowledge of authentication and authorization protocols (e.g., SSO, MFA, RBAC, ABAC).
• Strong understanding of directory services like Active Directory, LDAP.
• Experience in developing and integrating with RESTful APIs for IAM functionalities.
• Deep understanding of security best practices and frameworks.
• Expertise with IAM platforms (e.g., Okta, SailPoint, ForgeRock/Ping Identity, Microsoft Azure AD).
• Have played a lead role in software development projects in the cloud (preferably AWS).
• Passion for identifying and building new tools and technologies to solve complex problems.
• Strong technical knowledge building mission critical/highly available service-oriented software.
• Experience on automated testing of APIs.
• Experience working on Relational and NoSQL databases.
• Repository management using Git, Bitbucket; building CICD pipelines using Jenkins, Ansible or similar orchestration tool.
• Experience with monitoring tools such as CloudWatch, ELK Stack.
• Strong analytical and troubleshooting skills.
• Excellent verbal and written communication skills.
• Experience on AWS cloud platform services such as EC2, S3, RDS, Lambda, VPC, Route53 CloudFormation, IAM, KMS, and others is a huge plus.
• Knowledge of new cutting-edge security technologies and practices is a plus.
• Knowledge of vehicle head unit and how Safety Services works in auto industry is a plus.

Nice-to-haves

• Knowledge of new cutting-edge security technologies and practices is a plus.
• Knowledge of vehicle head unit and how Safety Services works in auto industry is a plus.