Manufacturing Site Reliability Engineer, Windows Platform

What to Expect Our Manufacturing SRE team owns the underlying platforms that keep production lines moving across all manufacturing sites. The fleet spans tens of thousands of Linux and Windows hosts driving station controllers, Industrial PCs (IPCs), camera systems, robot controllers, and label printers across every shop on every line.

The Controls organization is shifting more workloads back to Windows, and a major new robotics program is on track to run more Windows computers than Linux in production. Today, one engineer carries the Windows specialty for the entire team. This role exists to change that — to scale the depth of Windows expertise on the team so the platform can absorb the robotics rollout, IPC fleet growth, and a steady increase in Windows software complexity per host without losing reliability.

You partner with Controls Engineering, IT Manufacturing Operations, and the robotics team to make sure Windows hosts boot, image, monitor, recover, and patch the same way Linux hosts already do, and you contribute back to the broader SRE platform (imaging pipeline, host inventory, observability stack) so the wins compound.

What You'll Do Own the Windows production fleet end to end: Industrial PCs, test benches, station HMIs, robotics dyno PCs, and the long tail of factory Windows hosts across all sites

Extend GPOSentry, our internal GPO drift-detection service, to catch and auto-remediate policy drift across the Windows fleet before it reaches the floor

Drive Windows imaging through a custom PXE pipeline (Ansible, Jenkins, Artifactory) so a new IPC can boot, join the domain, and report green telemetry without manual intervention

Extend the Windows host inventory and management service to cover new platforms and new sites; co-maintain Windows LAPS rotation, AD lifecycle, and the endpoint management agent runtime

Push the Windows fleet onto the same observability surface as Linux: Grafana Alloy and Prometheus collecting metrics, structured logs into Splunk, alerting in Opsgenie or Jira Service Management

Build automation for the Windows-specific operational pain that does not exist on Linux: GPO drift, driver and firmware management, Windows Update windows, NTFS permission audits, time zone enforcement across sites, certificate rotation for OPC-UA

Roll out and sustain the SentinelOne agent across factory Windows endpoints, partnering with Infosec on detections and exclusions tuned for production hardware

Own the deployment story for Windows-resident in-house factory applications (print management, label printing services, camera/footage systems, station controllers) when they touch Windows boxes

Carry production on-call rotation for Windows incidents: triage P1 line-down events, write the runbook, file the Jira, drive the post-mortem, and turn the fix into automation

Contribute to the cross-platform fleet tooling the team owns (imaging, inventory, observability, Windows configuration management); submit PRs in Go, Python, PowerShell, or Ansible as the work demands

What You'll Bring 5+ years operating Windows in production at scale, including Active Directory, GPO, Windows Server, and Windows 10 or 11 LTSC on industrial hardware

Strong PowerShell skills: scripts that hit the Win32 API, parse event logs, drive WMI, and integrate with REST endpoints, not one-liners

Hands-on experience with at least one configuration management or imaging platform: Ansible, Intune, SCCM, MDT, Puppet, or equivalent custom PXE work

SRE practice fundamentals: SLO design, alert hygiene, runbook discipline, blameless post-mortem authorship, error-budget thinking

Working knowledge of Linux as a peer platform; you do not need to be a kernel hacker, but you can read a systemd unit, write a bash one-liner, and submit a clean Ansible PR

Comfort writing application code in at least one of Python, Go, or C#, enough to ship a small service or extend an existing one

Production experience with observability tooling: Prometheus or Grafana, Splunk or equivalent log platform, OpenTelemetry concepts

A bias for automating away repeated work, even at the cost of more upfront engineering effort

Direct, low-ego communication style; comfort working asynchronously across multiple sites and time zones

Benefits

Along with competitive pay, as a full-time Tesla employee, you are eligible for the following benefits at day 1 of hire:

Medical plans > plan options with $0 payroll deduction

Family-building, fertility, adoption and surrogacy benefits

Dental (including orthodontic coverage) and vision plans, both have options with a $0 paycheck contribution

Company Paid (Health Savings Accounts) HSA Contribution when enrolled in the High-Deductible medical plan with HSA

Healthcare and Dependent Care Flexible Spending Accounts (FSA)

401(k) with employer match, Employee Stock Purchase Plans, and other financial benefits

Company paid Basic Life, AD&D

Short-term and long-term disability insurance (90 day waiting period)

Employee Assistance Program

Sick and Vacation time (Flex time for salary positions, Accrued hours for Hourly positions), and Paid Holidays

Back-up childcare and parenting support resources

Voluntary benefits to include: critical illness, hospital indemnity, accident insurance, theft & legal services, and pet insurance

Weight Loss and Tobacco Cessation Programs

Tesla Babies program

Commuter benefits

Employee discounts and perks program

Earned Wage Access: Real-time pay access paid daily, subject to eligibility and schedule (applicable for below Sr. Managers levels)

Tesla is an Equal Opportunity / Affirmative Action employer committed to diversity in the workplace. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, age, national origin, disability, protected veteran status, gender identity or any other factor protected by applicable federal, state or local laws.

Tesla is also committed to working with and providing reasonable accommodations to individuals with disabilities. Please let your recruiter know if you need an accommodation at any point during the interview process.