Secure Every Identity, from AI to Human

Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables

organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world

stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence.

This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk.

Okta’s Workforce Identity Cloud Security Engineering group is looking for an experienced and passionate Staff Site Reliability

Engineer to join a team focused on designing and developing Security solutions to harden our cloud infrastructure. We embrace

innovation and pave the way to transform bright ideas into excellent security solutions that help run large-scale, critical

infrastructure. We encourage you to prescribe defense-in-depth measures, industry security standards and enforce the principle of

least privilege to help take our Security posture to the next level. Our Infrastructure Security team has a niche skill-set that

balances Security domain expertise with the ability to design, implement, rollout infrastructure across multiple cloud

environments without adding friction to product functionality or performance. We are responsible for the ever-growing need to

improve our customer safety and privacy by providing security services that are coupled with the core Okta product.

This is a high-impact role in a security-centric, fast-paced organization that is poised for massive growth and success. You will

act as a liaison between the Security org and the Engineering org to build technical leverage and influence the security roadmap.

You will focus on engineering security aspects of the systems used across our services. Join us and be part of a company that is

about to change the cloud computing landscape forever.

As a Staff Engineer, you should be able to identify gaps, propose innovative solutions, and contribute to roadmaps while driving

alignment across multiple teams within the organization. Additionally, you should serve as a role model, providing technical

mentorship to junior team members and fostering a culture of learning and growth

What are we looking for?

We are looking for a security-first SRE engineer who doesn't just "flag" issues but builds the automation to solve them. You

should have a deep-seated intuition for cloud-native security and a proven track record of hardening large-scale GCP and AWS

environments. As a Technical SME, you will design and build production infrastructure with a "security-at-scale" mindset.

What You Will Work On?

Security Evangelism: Lead initiatives to strengthen our security posture for critical infrastructure and promote best practices

across the engineering organization.

Incident Response & Reliability: Respond to production security incidents, perform root cause analysis, and build automated

preventions to ensure high performance and reliability.

Automated Hardening: Identify manual security processes and automate them using custom tooling and CI/CD integrations.

Architecture & Documentation: Develop technical documentation, runbooks, and procedures for a 24x7 online environment.

Platform Evolution: Continuously evolve our monitoring platforms, moving from simple auditing to active, automated prevention.

Minimum Required Knowledge, Skills, & Abilities:

Experience: 8+ years of experience architecting and running complex cloud networking and infrastructure, with at least 7+ years

specialized in DevSecOps or Cloud Security.

GCP Expertise: Minimum 3+ years of deep, hands-on experience securing GCP (GKE, GCE, Shared VPC etc).

Infrastructure as Code (IaC): 10+ years of experience using Terraform and Chef to manage complex cloud resources and OS hardening.

Automation Mastery: Expert-level proficiency in Go, Python, or Ruby for building custom security tooling and automated

remediation.

Hardened Containers: Proven track record of securing containerized workloads, including image scanning, K8s RBAC, and runtime

security tools (e.g., CrowdStrike Falcon, Falco, or gVisor).

Unflappable Troubleshooting: A "see a problem, fix the problem" mindset with the ability to debug complex networking, IAM, or

performance issues under pressure.

Security Foundations: Strong grasp of Linux internals, OS hardening (CIS benchmarks), and IP protocols (TLS/SSL, DNSSEC, BGP).

Education: BS in Computer Science or equivalent professional experience.

Key Responsibilities:

IAM & Secrets Management: Design and maintain large-scale production IAM policies and secrets management workflows .

Infrastructure Hardening: Implement and maintain Public Key Infrastructure (PKI) and ensure all GCE/GKE environments meet strict

compliance standards.

Operational Excellence: Utilize industry-standard tools like OSQuery, Splunk, Chronicle, Nessus, or Qualys/ Crowdstrike to monitor

system health and security telemetry.

Strategic Rollouts: Lead the phased transition of security policies from Audit/Detection mode to Blocking/Prevention mode,

ensuring zero impact on production uptime.

Bonus Points For:

Multi-Cloud IAM Governance: Experience designing a unified IAM framework across AWS and GCP, utilizing federated Identities such

as Workload, Workforce Identity Federation with understanding of SAML & OIDC auth mechanism and automated "Least Privilege"

enforcement.

Cloud-Native Reliability Engineering: Deep understanding of multi-cloud reliability patterns, maintaining high availability (HA)

during security patching or infrastructure-wide hardening.

Hardened Kubernetes Orchestration: Advanced experience securing GKE, EKS, and kOps, specifically implementing Pod Security

Standards, Network Policies, and Admission Controllers for a "Zero-Trust" posture.

Threat Modeling:Security Reviews & Threat Modeling at both Design & Implementation scope.

The Okta Experience

Supporting Your Well-Being
Driving Social Impact
Developing Talent and Fostering Connection + Community

We are intentional about connection. Our global community, spanning over 20 offices worldwide, is united by a drive to innovate.

Your journey begins with an immersive, in-person onboarding experience designed to accelerate your impact and connect you to our

mission and team from day one.

Okta is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race,

color, religion, sex, sexual orientation, gender identity, national origin, ancestry, marital status, age, physical or mental

disability, or status as a protected veteran. We also consider for employment qualified applicants with arrest and convictions

records, consistent with applicable laws.

If reasonable accommodation is needed to complete any part of the job application, interview process, or onboarding please use

this Form to request an accommodation.

Notice for New York City Applicants & Employees: Okta may use Automated Employment Decision Tools (AEDT), as defined by New York

City Local Law 144, that use artificial intelligence, machine learning, or other automated processes to assist in our recruitment

and hiring process. In accordance with NYC Local Law 144, if you are an applicant or employee residing in New York City,

please click here to view our full NYC AEDT Notice.

Role

Staff Site Reliability Engineer, Security- GCP

Similar Jobs

Staff Site Reliability Engineer

Okta

Bengaluru•Posted: Jul 13•Deadline: Aug 16

Staff Site Reliability Engineer - (Infra)

Okta

Bengaluru•Posted: Jul 13•Deadline: Aug 16

Principal Site Reliability Engineer

Okta

Bengaluru•Posted: Jul 13•Deadline: Aug 16

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. Get to know Okta Okta is The World’s Identity Company. We free everyone to safely use any technology—anywhere, on any device or app. Our Workforce and Customer Identity Clouds enable secure yet flexible access, authentication, and automation that transforms how people move through the digital world, putting Identity at the heart of business security and growth. At Okta, we celebrate a variety of perspectives and experiences. We are not looking for someone who checks every single box, we’re looking for lifelong learners and people who can make us better with their unique experiences. Join our team! We’re building a world where Identity belongs to you. The Engineering Opportunity We are seeking a Principal Site Reliability Engineer to serve as a technical leader for reliability engineering within Okta's Emerging Products Group (EPG). This role extends beyond operating production systems. You will define technical strategy, influence platform architecture, establish reliability standards, and lead transformational initiatives that improve scalability, resilience, security, and operational excellence for one of Okta's fastest-growing product areas. Initially, you will partner closely with the Spera / Identity Security Posture Management (ISPM) engineering organization to establish reliability strategy, operational excellence, and platform maturity. Over time, you will help drive broader reliability initiatives across EPG and contribute to the evolution of reliability engineering practices across multiple products including Workflows, IGA, PAM, and ISPM. You will work closely with engineering leadership, product leadership, architects, and Staff engineers to shape the future of Okta's cloud infrastructure and reliability practices. The ideal candidate combines deep technical expertise with strong organizational influence and has a proven track record of leading large-scale engineering initiatives that drive measurable business outcomes. What You'll Be Doing Reliability Strategy & Architecture * Define and drive the reliability strategy for critical product and platform services. * Establish standards for availability, resilience, observability, incident management, and operational readiness. * Lead architecture reviews for critical services and platform initiatives. * Partner with engineering leaders to ensure reliability objectives align with business priorities and customer expectations. * Create frameworks, standards, and operational guardrails that enable engineering teams to operate safely at scale. * Guide service architecture toward simplicity, scalability, resilience, and operational excellence. * Drive major initiatives that improve platform maturity and long-term sustainability. Product & Platform Leadership * Own reliability architecture and operational excellence for the Spera / ISPM product area. * Collaborate closely with engineering leadership to establish reliability objectives and technical roadmaps. * Lead large-scale scalability, resiliency, and performance initiatives. * Partner with platform and product engineering teams to build self-service operational capabilities that improve developer productivity while strengthening reliability and security. * Influence technical direction through data-driven recommendations, engineering expertise, and collaborative leadership. * Support highly available, large-scale cloud environments as part of an on-call rotation. ENGINEERING & AUTOMATION * Design, build, and operate large-scale cloud infrastructure and production services. * Develop software, automation, and infrastructure using Go, Python, Terraform, and related technologies. * Eliminate operational toil through automation, tooling, and platform engineering. * Improve deployment safety, operational workflows, and platform consistency through GitOps and Infrastructure-as-Code practices. * Collaborate on modernizing existing workloads and aligning them with evolving platform capabilities. * Lead complex engineering initiatives from conception through production rollout and long-term operational ownership. TECHNICAL LEADERSHIP * Mentor Staff and Senior engineers across multiple teams and organizations. * Lead technical reviews, design reviews, and operational readiness assessments. * Build engineering consensus across teams with differing priorities and objectives. * Help develop the next generation of technical leaders within Okta. * Drive adoption of reliability engineering best practices across EPG. * Share patterns, tooling, and operational practices across Workflows, Inbox, PAM, and ISPM teams. * Influence technical direction through expertise, collaboration, and execution rather than organizational authority. AI & AGENTIC OPERATIONS * Lead the exploration and adoption of AI-assisted reliability engineering practices across EPG. * Design and champion agentic systems that accelerate troubleshooting, incident response, root-cause analysis, and operational decision-making. * Evaluate emerging AI technologies and identify practical opportunities to improve reliability engineering workflows. * Establish best practices for safe, effective, and measurable use of AI within production operations. * Drive initiatives that reduce operational toil and improve engineering productivity through intelligent automation. OUR TECH STACK * Infrastructure/Orchestration: Kubernetes (EKS/GKE), Terraform, Helm, Git, ArgoCD, Gitops * Programming: Golang, Python * Observability: Datadog, Splunk * Data Stores: PostgreSQL, Redis, OpenSearch What We Are Looking For TECHNICAL EXCELLENCE * Extensive experience designing and operating large-scale production systems in AWS and/or GCP. * Deep expertise with Kubernetes in production environments. * Experience designing reliability strategies for Kubernetes-based platforms. * Strong expertise troubleshooting Kubernetes networking, storage, scheduling, scaling, and workload lifecycle challenges. * Extensive experience with Infrastructure as Code technologies such as Terraform and Helm. * Strong software engineering skills in Golang and/or Python. * Experience building internal platforms, developer tooling, and operational automation. * Deep understanding of distributed systems architecture and cloud-native application design. * Strong understanding of cloud networking fundamentals including DNS, service discovery, ingress, load balancing, TLS, traffic management, and multi-region architectures. * Experience operating and troubleshooting distributed data platforms such as PostgreSQL, Redis, OpenSearch, MySQL, Cassandra, or similar technologies. * Experience establishing observability standards, monitoring strategies, and operational best practices across engineering organizations. * Experience with or strong interest in AI-assisted engineering and operational automation. RELIABILITY & OPERATIONAL EXCELLENCE * Strong expertise operating customer-facing production systems at scale. * Deep understanding of reliability engineering principles including SLIs, SLOs, error budgets, capacity planning, and resilience engineering. * Experience leading major incident response efforts and driving long-term operational improvements. * Strong understanding of CI/CD, GitOps, deployment strategies, and automation-first operational practices. * Proven success driving large-scale reliability transformations and architectural modernization efforts. * Ability to balance reliability, scalability, security, customer experience, and engineering velocity. SECURITY & COMPLIANCE * Strong understanding of cloud security fundamentals, IAM, secrets management, and secure infrastructure design. * Experience operating systems within security-sensitive or regulated environments is a plus. * Familiarity with operational controls, compliance requirements, and security best practices in cloud-native environments. LEADERSHIP & INFLUENCE * Demonstrated success leading complex technical initiatives across multiple teams and organizations. * Demonstrated ability to drive technical strategy and influence engineering outcomes across multiple organizations and leadership teams. * Proven ability to influence technical direction without direct organizational authority. * Experience working effectively within globally distributed engineering organizations spanning multiple timezones and cultures. * Strong collaboration, communication, and stakeholder management skills. * Experience mentoring Staff engineers and helping develop future technical leaders. * Ability to translate business objectives into technical strategy and measurable reliability outcomes. * Experience working closely with engineering leadership, architects, and product leaders to drive organizational change. PREFERRED QUALIFICATIONS * Experience operating SaaS platforms serving millions of users. * Experience supporting globally distributed production environments. * Experience leading platform engineering or reliability transformation initiatives. * Experience implementing AI-assisted operational tooling, agentic workflows, or intelligent automation platforms. * Prior experience as a Staff, Principal, or equivalent senior technical leader in Site Reliability Engineering, Platform Engineering, Infrastructure Engineering, or Cloud Operations. #LI-Hybrid #P25309_3469886 The Okta Experience * Supporting Your Well-Being * Driving Social Impact * Developing Talent and Fostering Connection + Community We are intentional about connection. Our global community, spanning over 20 offices worldwide, is united by a drive to innovate. Your journey begins with an immersive, in-person onboarding experience designed to accelerate your impact and connect you to our mission and team from day one. Okta is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, marital status, age, physical or mental disability, or status as a protected veteran. We also consider for employment qualified applicants with arrest and convictions records, consistent with applicable laws. If reasonable accommodation is needed to complete any part of the job application, interview process, or onboarding please use this Form to request an accommodation. Notice for New York City Applicants & Employees: Okta may use Automated Employment Decision Tools (AEDT), as defined by New York City Local Law 144, that use artificial intelligence, machine learning, or other automated processes to assist in our recruitment and hiring process. In accordance with NYC Local Law 144, if you are an applicant or employee residing in New York City, please click here to view our full NYC AEDT Notice.