Department Description :

At Disney, were storytellers. We make the impossible, possible. The Walt Disney Company (TWDC) is a world-class entertainment and technological leader. Walts passion was to continuously envision new ways to move audiences around the worlda passion that remains our touchstone in an enterprise that stretches from theme parks, resorts and a cruise line to sports, news, movies and a variety of other businesses. Uniting each endeavor is a commitment to creating and delivering unforgettable experiences and were constantly looking for new ways to enhance these exciting experiences.

The Enterprise Technology mission is to deliver technology solutions that align to business strategies while enabling enterprise efficiency and promoting cross-company collaborative innovation. Our group drives competitive advantage by enhancing our consumer experiences, enabling business growth, and advancing operational excellence.

The Global Information Security (GIS) organization strives to secure the magic by employing best-in-class services to assess, prevent, detect, and respond to cyber threats that present risk to The Walt Disney Company. We enable the business by integrating enterprise and business segment-specific supported services to create a robust, efficient, and adaptable cybersecurity program. Our key objectives are to :

- Secure the Magic by protecting information systems and platforms.

- Reduce Risk by proactively assessing, preventing, and detecting to prevent harm to the Company and our Guests.

- Strengthen the business through optimizing execution, application, and technology used to protect the Company.

- Innovate by investing in core capabilities to enhance operational efficiency.

Team Description :

We are looking for a Security Engineer - SECRETS to join Disneys Global Information Security - Identity and Access Management (IAM) group. This group is responsible for providing a Core IAM ecosystem of products and platforms in use across the company by cast members, employees, and partners within Disneys business segments (ESPN, Parks, Studios, Disney Streaming) and corporate functions. Our vision is to provide modern Identity and Access Management capabilities and services that are simple, seamless, and secure to protect our workforce, our data, and our brands.

What Youll Do :

- Assist with implementing application credential integrations using PAM platform APIs (CyberArk CCP/AAM, CA PAM REST API) under senior engineer guidance.

- Support secrets injection tasks for CI/CD pipelines (Jenkins, GitLab CI, GitHub Actions, Azure DevOps) to help replace hardcoded or static credentials.

- Help onboard application accounts and service credentials into the PAM vault, coordinating with application owners under direction from senior engineers.

- Assist in developing reusable integration components in Python, PowerShell, Java, or Node.js based on established patterns.

- Support evaluation and integration tasks for DevOps secrets management platforms (HashiCorp Vault, AWS Secrets Manager, Azure Key Vault) with the enterprise PAM platform.

- Help collaborate with Cloud and DevOps teams on securing container workloads, Kubernetes service accounts, and cloud-native application credentials.

- Help document integration patterns, API usage guidance, and developer onboarding guides for the application team community.

- Assist in troubleshooting integration failures across the application-to-vault authentication chain.

Required Qualifications & Skills :

- 3+ years of software engineering or integration engineering experience, with exposure to API integrations and enterprise platforms.

- Working knowledge of at least one language used for integration development : Python, PowerShell, Java, JavaScript/Node.js.

- Familiarity with REST API design and consumption, including authentication patterns (OAuth2, API keys, mTLS).

- Exposure to CI/CD pipeline tooling and DevOps workflows (Jenkins, GitLab CI, GitHub Actions, Azure DevOps).

- Basic understanding of application secrets management challenges : hardcoded credentials, configuration file secrets, and connection string management.

- Ability to work collaboratively with application teams who may have limited PAM or security background.

Preferred Qualifications :

- Hands-on experience with CyberArk CCP/AAM or CA PAM application integration APIs.

- Experience with HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, or GCP Secret Manager.

- Kubernetes and container security experience : pod identity, workload identity, Secrets Store CSI Driver.

- Infrastructure as Code experience (Terraform) for deploying and configuring integration components.

- Experience with non-human identity (NHI) management frameworks.

- Background in DevSecOps or secure SDLC practices.

- Masters degree in Information Technology, Information Security, Computer Science, or Business related field or equivalent validated work experience.

Required Education :

- Bachelors degree in Computer Science, Information Systems, Software, Electrical or Electronics Engineering, or comparable field of study, and/or equivalent work experience.