1 hour ago
Responsibilities
- Architect and govern CI/CD and deployment frameworks across Salesforce, AEM, NetSuite, Workday, and modern web applications.
- Integrate SAST, DAST, software composition analysis, secrets detection, secrets management, and supply-chain safeguards into development workflows.
- Manage Cloudflare or comparable CDN, WAF, DDoS protection, rate limiting, bot management, SSL/TLS, and DNS security policies.
- Govern IAM, RBAC, OAuth 2.0, JWT, SAML/SSO, API gateways, GraphQL endpoints, CORS, and API key lifecycles.
- Build centralized SIEM monitoring and security analytics, lead incident response and root cause analysis, and establish continuous compliance controls.
- Partner with architecture, engineering, and information security teams to drive secure-by-design architecture and threat modeling.
- Create self-service security tooling and developer guidance while mentoring senior and mid-level engineers.
Requirements
- At least 8 years of hands-on experience in DevSecOps, SRE, or Security Engineering, including at least 3 years in a senior or lead capacity supporting enterprise applications.
- Experience securing and automating deployments across at least two enterprise platforms such as Salesforce, AEM Cloud, NetSuite, or Workday.
- Deep expertise with GitHub Actions, CircleCI, Jenkins, Gearset, and Copado for source-control and automation pipelines.
- Advanced hands-on experience with Cloudflare, Akamai, or similar edge security platforms, including WAF, SSL/TLS, DDoS mitigation, and DNS management.
- Proficiency embedding Snyk, SonarQube, GitGuardian, OWASP ZAP, Prisma Cloud, or Wiz into development workflows.
- Expertise with Splunk or Datadog for log aggregation, security dashboards, threat hunting, and automated alerting.
- Mastery of Python, Bash, or Go and Terraform for infrastructure provisioning and security guardrails.
- Knowledge of REST, GraphQL, JWT, OAuth 2.0, and secure Next.js/React deployments on Vercel.
- Preferred qualifications include CISSP, CCSP, AWS Certified Security – Specialty, or platform-specific certifications; cloud, container/serverless security, and AI-assisted DevOps experience are also desirable.
Benefits
- The Okta Experience includes well-being support, social-impact initiatives, talent development, and connection and community programs.
- The company has a global community spanning more than 20 offices and provides an immersive in-person onboarding experience.
- Reasonable accommodation is available during the application, interview, and onboarding processes.
Tech Stack
About Okta
Okta secures AI. Okta is The World’s Identity Company. Freeing everyone to safely use any technology—anywhere, on any device or app.