Okta’s Workforce Identity Cloud Security Engineering group is looking for an experienced and passionate Staff Site Reliability Engineer to join a team focused on designing and developing Security solutions to harden our cloud infrastructure. We embrace innovation and pave the way to transform bright ideas into excellent security solutions that help run large-scale, critical infrastructure. We encourage you to prescribe defense-in-depth measures, industry security standards and enforce the principle of least privilege to help take our Security posture to the next level. Our Infrastructure Security team has a niche skill-set that balances Security domain expertise with the ability to design, implement, rollout infrastructure across multiple cloud environments without adding friction to product functionality or performance. We are responsible for the ever-growing need to improve our customer safety and privacy by providing security services that are coupled with the core Okta product.

This is a high-impact role in a security-centric, fast-paced organization that is poised for massive growth and success. You will act as a liaison between the Security org and the Engineering org to build technical leverage and influence the security roadmap. You will focus on engineering security aspects of the systems used across our services. Join us and be part of a company that is about to change the cloud computing landscape forever.

As a Staff Engineer, you should be able to identify gaps, propose innovative solutions, and contribute to roadmaps while driving alignment across multiple teams within the organization. Additionally, you should serve as a role model, providing technical mentorship to junior team members and fostering a culture of learning and growth

What are we looking for?
We are looking for a security-first SRE engineer who doesn't just "flag" issues but builds the automation to solve them. You should have a deep-seated intuition for cloud-native security and a proven track record of hardening large-scale GCP and AWS environments. As a Technical SME, you will design and build production infrastructure with a "security-at-scale" mindset.

What You Will Work On?
Security Evangelism: Lead initiatives to strengthen our security posture for critical infrastructure and promote best practices across the engineering organization.
Incident Response & Reliability: Respond to production security incidents, perform root cause analysis, and build automated preventions to ensure high performance and reliability.
Automated Hardening: Identify manual security processes and automate them using custom tooling and CI/CD integrations.
Architecture & Documentation: Develop technical documentation, runbooks, and procedures for a 24x7 online environment.
Platform Evolution: Continuously evolve our monitoring platforms, moving from simple auditing to active, automated prevention.

Minimum Required Knowledge, Skills, & Abilities:
Experience: 8+ years of experience architecting and running complex cloud networking and infrastructure, with at least 7+ years specialized in DevSecOps or Cloud Security.
GCP Expertise: Minimum 3+ years of deep, hands-on experience securing GCP (GKE, GCE, Shared VPC etc).
Infrastructure as Code (IaC): 10+ years of experience using Terraform and Chef to manage complex cloud resources and OS hardening.
Automation Mastery: Expert-level proficiency in Go, Python, or Ruby for building custom security tooling and automated remediation.
Hardened Containers: Proven track record of securing containerized workloads, including image scanning, K8s RBAC, and runtime security tools (e.g., CrowdStrike Falcon, Falco, or gVisor).
Unflappable Troubleshooting: A "see a problem, fix the problem" mindset with the ability to debug complex networking, IAM, or performance issues under pressure.
Security Foundations: Strong grasp of Linux internals, OS hardening (CIS benchmarks), and IP protocols (TLS/SSL, DNSSEC, BGP).
Education: BS in Computer Science or equivalent professional experience.

Key Responsibilities:
IAM & Secrets Management: Design and maintain large-scale production IAM policies and secrets management workflows .
Infrastructure Hardening: Implement and maintain Public Key Infrastructure (PKI) and ensure all GCE/GKE environments meet strict compliance standards.
Operational Excellence: Utilize industry-standard tools like OSQuery, Splunk, Chronicle, Nessus, or Qualys/ Crowdstrike to monitor system health and security telemetry.
Strategic Rollouts: Lead the phased transition of security policies from Audit/Detection mode to Blocking/Prevention mode, ensuring zero impact on production uptime.

Bonus Points For:
Multi-Cloud IAM Governance: Experience designing a unified IAM framework across AWS and GCP, utilizing federated Identities such as Workload, Workforce Identity Federation with understanding of SAML & OIDC auth mechanism and automated "Least Privilege" enforcement.
Cloud-Native Reliability Engineering: Deep understanding of multi-cloud reliability patterns, maintaining high availability (HA) during security patching or infrastructure-wide hardening.
Hardened Kubernetes Orchestration: Advanced experience securing GKE, EKS, and kOps, specifically implementing Pod Security Standards, Network Policies, and Admission Controllers for a "Zero-Trust" posture.
Threat Modeling:Security Reviews & Threat Modeling at both Design & Implementation scope.

We are looking for a Staff Software Engineer that will join the Auth0 Security Engineering organization. You’ll be responsible for designing and building the security guardrails for our multi-cloud environment, translating complex security and compliance standards into programmatic, code-driven policies.

What You Will Do

• Cloud Security Strategy: Design organization-wide controls (SCPs, Azure Policy) that provide maximum protection with minimum developer friction.
• Identity & Access Management (IAM): Architect templates and permission boundaries that govern how services and humans interact with our cloud environment with the principle of least privilege in mind.
• Infrastructure & Network Security: Define the security standards for VPC architecture, edge networking, and cross-account connectivity.
• Platform Security Architecture: Lead platform-related security reviews for new features and high-impact services, ensuring security is baked into the design phase.
• System Design: Design systems and processes to validate the security posture of the platform, ensuring our security policies are enforced in real-time with actionable feedback for engineering teams.
• Mentorship & Influence: You raise the bar for the entire organization by mentoring junior engineers and influencing senior leadership on critical security decisions.

What You Bring

• Cloud & Infrastructure Expertise:  8+ years of proven experience in information security, specifically within cloud-native environments, Kubernetes (EKS, AKS), and cloud security.
• Network Architecture & PKI: Deep understanding of secure networking principles, including VPC peering/transit gateways, VPN implementations, edge protection, and managing public/private PKI infrastructures.
• Policy & Automation Specialist: Strong background in building automated controls for enforcing Policy-as-Code within Terraform workflows.
• Practical Risk Assessments: Hands-on experience identifying attack vectors and conducting risk assessments for complex, distributed systems.
• Tooling & AI Proficiency: Experience working with security platforms for analyzing cloud permissions and a background or interest in applying AI to streamline security tasks and governance.
• Collaborative Influencer: Exceptional communication skills with a track record of aligning multiple teams toward shared security goals.
• Education: A Bachelor's degree in Computer Science, Information Security, Systems Engineering, or a related field.

Nice to Have

• Experience navigating compliance frameworks such as FedRAMP, SOC2, or HIPAA in a cloud environment.
• Proficiency in one or more languages used for automation and tooling, such as Python, Go, or JavaScript.
• Experience creating, managing, and securing containerized environments.
• Experience with service mesh (Istio) security policies and zero-trust networking.

Additional requirements:

• This position requires the ability to access federal environments and/or have access to protected federal data.  As a condition of employment for this position, the successful candidate must be able to submit documentation establishing U.S. Person status (e.g. a U.S. Citizen, National, Lawful Permanent Resident, Refugee, or Asylee. 22 CFR 120.15) upon hire.

#LI-HYBRID

#LI-SH1
P-1609.1_3388437

Okta’s Workforce Identity Cloud Security Engineering group is looking for an experienced and passionate software security engineer to join a team focused on designing and developing Security solutions to harden our frameworks & infrastructure. We embrace innovation and pave the way to transform bright ideas into excellent security software solutions that help run large-scale, mission-critical software. We encourage you to prescribe defense-in-depth measures, industry security standards, enforce the principle of least privilege to  help take our Security posture to the next level. Our Security engineering team has a niche skill-set that combines Security domain expertise with  the ability to design, implement and rollout security features and functionalities without adding friction to product functionality or performance. We are responsible for the ever-growing need to improve our customer safety and privacy by providing security services that are coupled with the core Okta product.

This is a high-impact role in a security-centric, fast-paced organization that is poised for massive growth and success. You will act as a liaison between the Security org and the engineering org to build technical leverage and influence the security roadmap and direction. You will focus on engineering security and privacy aspects of the systems used across our services while working on a weekly release cadence. You will be empowered to propose  stimulating new projects for our roadmap and rewarded with projects using  emerging technologies. Join us and be part of a company that is about to change the cloud computing landscape forever.

Bring all the passion and dedication along and there’s no telling what you could accomplish!

Preferred qualification and abilities:

• 7+ years of development experience in designing and implementing software systems in Java, building highly reliable and mission-critical software.
• 3+ years of work experience in designing and implementing security solutions for applications and distributed systems.
• Work experience and excellent understanding in mitigating OWASP Top 10 attacks on applications, Application Security, Cryptography, Authentication, Authorization using Role-Based and Attribute-Based access controls.
• Strong understanding of concepts such as Test-Driven development, Secure SDLC, Secure code reviews and the ability to identify and mitigate threat vectors and vulnerabilities in code and infrastructure.
• Good understanding and experience in using cloud service providers such as AWS and GCP.
• Developing and maintaining technical documentation such as cookbooks, design and architecture docs.
• Troubleshooting and fixing production issues to ensure reliability, security and performance.
• Work experience in using RDBMS like MySQL, good grasp of concepts such as  replication and clustering along with familiarity in data stores such as Redis and Elasticsearch.
• Excellent grasp of software engineering principles coupled with strong written and verbal communication skills.
• B.S or M.S in Computer Science or related fields.

Responsibilities :

• Act as a liaison between the engineering and security org to develop innovative requirements for the security roadmap.
• Evangelize security best practices across the engineering org.
• Research, design, implement and own security oriented frameworks and features with the common goal of protecting Okta’s customers.
• Routinely participate in cross-vertical code reviews with emphasis on Security.
• Break down complex problems into sub-tasks while prototyping rapidly and iteratively contributing to security initiatives using agile practices.
• Coach and mentor junior engineers in the team.

#LI_Hybrid

P22332_3090120

The Team

Okta’s Workforce Identity Cloud Security Engineering group embraces innovation and paves the way to transform bright ideas into excellent security software solutions that help run large-scale, mission-critical software. Our Security engineering team has a niche skill-set that combines security domain expertise with the ability to design, implement and rollout security features and functionalities without adding friction to product functionality or performance. We are responsible for the ever-growing need to improve our customer safety and privacy by providing security services that are coupled with the core Okta product.

The Role

Okta’s Workforce Identity Cloud Security Engineering group is looking for an experienced and passionate Staff Software Security Engineer to join a team focused on designing and developing Security solutions to harden our frameworks & infrastructure. We encourage you to prescribe defense-in-depth measures, industry security standards, and enforce the principle of least privilege to help take our Security posture to the next level.

This is a high-impact role in a security-centric, fast-paced organization that is poised for massive growth and success. You will act as a liaison between the Security org and the engineering org to build technical leverage and influence the security roadmap and direction. You will focus on engineering security and privacy aspects of the systems used across our services while working on a weekly release cadence. You will be empowered to propose  stimulating new projects for our roadmap and rewarded with projects using  emerging technologies. Join us and be part of a company that is about to change the cloud computing landscape forever.

What you’ll be doing 

• Act as a liaison between the engineering and security org to develop innovative requirements for the security roadmap
• Evangelize security best practices across the engineering org
• Research, design, implement and own security oriented frameworks and features with the common goal of protecting Okta’s customers
• Routinely participate in cross-vertical code reviews with emphasis on Security
• Break down complex problems into sub-tasks while prototyping rapidly and iteratively contributing to security initiatives using agile practices
• Coach and mentor junior engineers in the team

What you’ll bring to the role

• 8+ years of development experience in designing and implementing software systems in Java, building highly reliable and mission-critical software
• 4+ years of work experience in designing and implementing security solutions for applications and distributed systems
• Work experience and excellent understanding in mitigating OWASP Top 10 attacks on applications, Application Security, Cryptography, Authentication, Authorization using Role-Based and Attribute-Based access controls
• Strong understanding of concepts such as Test-Driven development, Secure SDLC, Secure code reviews and the ability to identify and mitigate threat vectors and vulnerabilities in code and infrastructure
• Good understanding and experience in using cloud service providers such as AWS and GCP
• Good understanding of 'AI Secure by Design' practices throughout the development lifecycle, ensuring secure coding for AI-powered applications and validating the integrity of training datasets
• Engineer and implement AI-based security solutions (e.g., automated threat analysis) that enhance application and infrastructure security
• Developing and maintaining technical documentation such as cookbooks, design and architecture docs
• Troubleshooting and fixing production issues to ensure reliability, security and performance
• Work experience in using RDBMS like MySQL, good grasp of concepts such as  replication and clustering along with familiarity in data stores such as Redis and Elasticsearch
• Excellent grasp of software engineering principles coupled with strong written and verbal communication skills
• B.S or M.S in Computer Science or related fields

#LI-SM1

#LI-Hybrid

P12002_3360981