1 month ago
Base Salary
$224k - $308k/yr
Responsibilities
- Define and evolve the architecture of Okta Federal’s SIPR and JWICS environments in alignment with DoD reference designs.
- Design resilient infrastructure-as-code and blueprints for air-gapped environments, including disconnected operations, cross-domain solutions, and sneaker-net patch management.
- Translate DISA STIGs and RMF compliance controls into automated technical implementations for engineering teams.
- Select and integrate compliant High Side tools, including hardened Iron Bank containers, while reviewing architectural changes and major system upgrades.
- Establish observability and continuous-monitoring architectures that support auditing and operational visibility.
- Measure platform uptime, ATO velocity, patch latency, vulnerability resolution time, and developer satisfaction.
Requirements
- 12+ years of experience in systems architecture, DevSecOps engineering, or a similar role.
- At least 5 years of experience working in DoD classified environments at IL6/Secret or higher.
- Deep expertise with Platform One, Cloud One, Big Bang, and Iron Bank in disconnected environments.
- Strong understanding of Kubernetes, EKS, RKE2, container registries, Helm charts, and sidecars in air-gapped setups.
- Hands-on experience with DoD CC SRG IL6, NIST 800-53, and FIPS 140-3 compliance requirements.
- Experience with Cross Domain Solutions and secure data transfer between IL5 and SIPR/JWICS networks.
- Experience implementing Zero Trust Architecture in legacy or restrictive network environments.
- Ability to explain classified-environment constraints to uncleared commercial stakeholders and influence decisions across business units.
- Must be able to obtain and maintain a U.S. Secret or Top Secret security clearance as required by government contracts.
Benefits
- Health, dental, and vision insurance.
- 401(k), flexible spending account, and paid leave including PTO and parental leave.
- Equity and bonus opportunities may be available in accordance with applicable plans and policies.
- In-person onboarding and connection-focused support through Okta’s global community.
- The position is onsite, as indicated by the job listing.
Tech Stack
HelmKubernetes
Categories
About Okta
Okta builds cloud-based identity and access management for enterprises and developers, including single sign-on, multi-factor authentication, and lifecycle management. It sells subscription SaaS as the Okta Workforce Identity and Customer Identity Clouds; the latter incorporates Auth0, acquired in 2021. Founded in 2009 and headquartered in San Francisco, Okta is a public company traded on Nasdaq.