Secure Every Identity, from AI to Human

Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables

organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world

stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence.

This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk.

Technology, Data, and Insights (TDI) is on a mission to accelerate Okta's scale and growth. We bring world-class business acumen

and technology expertise to every interaction. We also drive cross-functional collaboration and are focused on delivering

measurable business outcomes.

The TDI Infrastructure Engineering team owns the foundational platforms that power Okta's business — from cloud infrastructure and

AI platform delivery to network engineering, developer productivity, observability, and client platforms. We are a team of

builders who design and operate at scale, and we are in the middle of a strategic transformation: evolving our cloud practice from

a self-service model into a managed, opinionated platform that the entire business can rely on.

THE CLOUD PLATFORM ARCHITECT OPPORTUNITY

Okta Federal, Inc. is looking for a dedicated Cloud Platform Architect for TDI Infrastructure Engineering — the technical

authority for how we design, build, and evolve the cloud infrastructure that underpins our AI platform and the broader workloads

running across the business. You will define the architectural standards, patterns, and strategies that the Cloud Platform

Engineering team builds to, and you will serve as a key partner to AI, security, and productivity architects as we scale Okta's

cloud capabilities to meet increasing business demand.

This is a hands-on builder role. We are not looking for someone who advises from a distance — we need someone who has shipped

cloud infrastructure at scale and brings the credibility and depth to make sound architectural decisions in a fast-moving

environment. You will operate at a critical moment: Okta's AI platform is scaling rapidly, our cloud platform team is

transforming, and the foundational decisions made now will define the trajectory of our infrastructure for years.

This role reports directly to the Director of Infrastructure Engineering.

WHAT YOU'LL BE DOING

Define and own Okta's Cloud Platform architecture — establish reference architectures, design standards, and guardrails that

bring consistency, security, and reliability to workloads running across the business

Lead the architecture for Kubernetes and EKS — design and evolve our cluster strategy, multi-tenancy model, networking

topology, and security posture as the platform scales to support AI agent workloads and diverse business unit deployments

Elevate Okta's AI platform — partner with AI architects and platform engineers to evolve our agent and model-serving

infrastructure from its current state to a production-grade, scalable platform capable of supporting broad business adoption

Drive multi-cloud strategy — build the evaluation framework and decision criteria for when and how Okta leverages AWS, Azure,

and Google Cloud; ensure workload placement is intentional and optimized for performance, cost, and capability

Serve as the technical anchor for the Cloud Platform Engineering team — raise the architectural quality of everything the team

designs and builds as we complete the transformation from account vending to a managed platform model

Partner cross-functionally with AI, security, and productivity architects, product managers, and business unit stakeholders to

ensure cloud infrastructure decisions align with Okta's product, compliance, and operational requirements — including support

for federal programs and FedRAMP environments

Partner cross-functionally to design cloud-native solutions that can be effectively adapted for air-gapped, self-hosted

environments like US Secret (SIPRNet) and US Top Secret (JWICS).

Help architect and validate foundational Kubernetes and infrastructure designs within unclassified AWS GovCloud sandboxes. You

will ensure these commercial-side designs translate seamlessly when tested against emulators that simulate the strict

constraints of air-gapped networks.

Ensure our commercial cloud platform architecture shares foundational DNA with our highly regulated deployments, aligning with

DoD-centric frameworks like the USAF's "Big Bang" architecture and utilizing Iron Bank hardened containers where applicable.

WHAT YOU'LL BRING TO THE ROLE

10+ years of hands-on cloud infrastructure experience with deep, demonstrated expertise in one or more major cloud providers

(AWS, GCP, or Azure) — including compute, networking, storage, IAM, and managed services at enterprise scale; AWS experience is

preferred given our current environment, but strong multi-cloud or GCP backgrounds are equally valued

Proven experience designing and operating Kubernetes and EKS at scale — cluster architecture, multi-tenancy patterns,

networking (CNI, service mesh), security hardening, and day-2 operations

Experience architecting infrastructure for AI and machine learning workloads — GPU compute, model serving, data pipeline

infrastructure, and the security and access patterns that go with them

Demonstrated experience making intentional cloud provider placement decisions — evaluating workloads against provider

capabilities, cost profiles, compliance requirements, and existing organizational footprint rather than defaulting to a single

cloud

Strong cloud security background — IAM design, network segmentation, secrets management, policy-as-code, and experience with

compliance frameworks (SOC 2, FedRAMP, or equivalent)

Solid understanding of enterprise identity and access management patterns — including federated identity, SSO, and SCIM — and

experience integrating cloud workloads and platform services with identity providers such as Okta

Infrastructure-as-code fluency — Terraform, AWS CDK, or equivalent; experience building and maintaining reusable, modular IaC

at enterprise scale

Demonstrated ability to influence without authority — experience driving architectural alignment across engineering, security,

product, and business stakeholders in a fast-moving organization

Security Clearance: Active U.S. TS/SCI with polygraph.
The selected candidate may be subject to drug testing to the extent required by U.S. Government contracts.

EXTRA CREDIT IF YOU HAVE EXPERIENCE IN ANY OF THE FOLLOWING

Experience designing or operating cloud infrastructure for FedRAMP authorized environments or federal programs
Designing infrastructure for completely air-gapped networks, Sovereign Clouds, or DoD Impact Level 6/7 environments.
Hands-on experience building or operating AI agent platforms — orchestration frameworks, vector databases, model routing, or

inference optimization

FinOps experience — cloud cost governance, chargeback models, commitment-based discount strategies, and rightsizing at scale
Platform engineering for internal developer platforms (IDP) — developer self-service, golden paths, and guardrails
Service mesh technologies such as Istio or Linkerd in production Kubernetes environments
Kubernetes certifications (CKA, CKS, CKAD) or AWS certifications (Solutions Architect Professional, Security Specialty)
Familiarity with cloud-native security operations platforms such as Google SecOps (Chronicle) — including log ingestion

architecture, data residency considerations, and GCP IAM integration patterns

Familiarity with DoD/IC DevSecOps reference architectures and networking, specifically traversing boundaries via cross-domain

solution (CDS) and deploying DevOps tools like "Big Bang" via Iron Bank hardened containers.

LOCATION

This is a US-based role. Candidates must be located in the United States. Okta operates a flexible hybrid work model; specific

in-office expectations will be discussed during the hiring process.

Okta is committed to complying with applicable data privacy and security laws and regulations. For more information, please see

our Privacy Policy.

Additional requirements:

U.S. soil status - the employee must be on U.S. soil, which means the 50 states, the District of Columbia, or outlying areas of

the United States, as defined in Federal Acquisition Regulation (FAR) 2.101

U.S. Security Clearance status - the employee must be able to obtain and maintain a U.S. security clearance (Secret or Top

Secret) to the extent required by U.S. Government contracts.

#LI-MK1

#LI-onsite

P24721_3470431

Below is the annual base salary range for candidates located in California (excluding San Francisco Bay Area), Colorado, Illinois,

New York and Washington. Your actual base salary will depend on factors such as your skills, qualifications, experience, and work

location. In addition, Okta offers equity (where applicable), bonus, and benefits, including health, dental and vision insurance,

401(k), flexible spending account, and paid leave (including PTO and parental leave) in accordance with our applicable plans and

policies. To learn more about our Total Rewards program please visit: https://rewards.okta.com/us.

The annual base salary range for this position for candidates located in California (excluding San Francisco Bay Area), Colorado,

Illinois, New York, and Washington is between:

$244,000—$336,000 USD

The Okta Experience

Supporting Your Well-Being
Driving Social Impact
Developing Talent and Fostering Connection + Community

We are intentional about connection. Our global community, spanning over 20 offices worldwide, is united by a drive to innovate.

Your journey begins with an immersive, in-person onboarding experience designed to accelerate your impact and connect you to our

mission and team from day one.

Okta is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race,

color, religion, sex, sexual orientation, gender identity, national origin, ancestry, marital status, age, physical or mental

disability, or status as a protected veteran. We also consider for employment qualified applicants with arrest and convictions

records, consistent with applicable laws.

If reasonable accommodation is needed to complete any part of the job application, interview process, or onboarding please use

this Form to request an accommodation.

Notice for New York City Applicants & Employees: Okta may use Automated Employment Decision Tools (AEDT), as defined by New York

City Local Law 144, that use artificial intelligence, machine learning, or other automated processes to assist in our recruitment

and hiring process. In accordance with NYC Local Law 144, if you are an applicant or employee residing in New York City,

please click here to view our full NYC AEDT Notice.

Role

Cloud Infrastructure Architect, Okta Federal

Similar Jobs

Senior Site Reliability Engineer, Kubernetes w/ active TS/SCI

Okta

Washington•Posted: Jul 14•Deadline: Aug 17

Senior Manager, Site Reliability Engineering (Federal)

Okta

Washington•Posted: Jul 15•Deadline: Aug 17

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. SENIOR MANAGER, SITE RELIABILITY ENGINEERING Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. THE FEDERAL OPERATIONS ENGINEERING GROUP Okta's Federal Operations team supports government customers operating in FedRAMP-authorized, IL4, and IL5 environments. We deliver the same 99.999% availability promise to the federal market while meeting the strict security, compliance, and operational requirements that come with it. We're looking for a technical leader who understands both the SRE discipline and the unique demands of federal customer relationships — someone who can hold a technical conversation with an agency ISSO in the morning and unblock an incident bridge with an engineering team in the afternoon. As Senior Manager of Federal SRE Operations, you will own the operational health of Okta's federal environments, lead a team of engineers working within compliance-governed change processes, and serve as a trusted point of contact for federal security stakeholders. What you'll be doing * Lead and grow a team of SREs operating Okta's FedRAMP High, IL4, and IL5 environments, ensuring reliability and compliance obligations are met simultaneously. * Serve as the primary operational relationship manager for federal agency security leaders — including Authorizing Officials (AOs), ISSOs, and ISSMs — translating technical SRE practices into language and posture appropriate for federal oversight. * Own the continuous monitoring program for Okta's federal boundary: coordinate POA&M remediation, drive vulnerability SLA compliance, and represent operational risk posture in ATO reviews. * Partner with Okta's GovCloud product and security teams to ensure infrastructure changes go through FedRAMP-compliant change management processes without sacrificing velocity. * Drive incident response and post-incident review processes that satisfy federal reporting obligations (e.g., FISMA incident notification timelines) while improving system reliability. * Manage cross-functional relationships with 3PAOs, federal agency security teams, and internal compliance, legal, and security stakeholders during audits, ATO renewals, and security assessments. * Maintain operational runbooks, system security plans (SSPs), and evidence packages that reflect the true state of the environment — not just what audit season requires. * Accelerate the federal engineering team's velocity by building compliant self-service tooling, automation, and CI/CD pipelines that reduce the friction of operating in a restricted environment. * Lead, mentor, and grow engineers across the federal SRE organization, including setting career paths that bridge deep federal compliance knowledge with modern SRE practices. What you'll bring to the role * 5+ years of experience in technical leadership and people management, with at least 3 years in a federal or regulated environment (FedRAMP, DoD, IC, or equivalent). * Demonstrated experience managing relationships with federal security stakeholders — AOs, ISSOs, agency CISOs, or equivalent — not just writing documentation for them. * Working knowledge of NIST SP 800-53, FedRAMP authorization frameworks, FISMA reporting requirements, and DISA STIGs. * Experience operating large-scale cloud infrastructure in FedRAMP-authorized environments (AWS GovCloud preferred); IL4/IL5 experience a strong plus. * Strong background in SRE or platform engineering fundamentals: Kubernetes, IaC (Terraform), CI/CD, observability, and incident management. * Ability to hold compliance and reliability in tension — understanding when a change needs to go through a CAB and when a P1 incident requires you to move faster and document after. * Strong verbal and written communication skills; comfortable presenting operational risk and reliability posture to non-technical federal security officials. * Experience supporting or leading FedRAMP ATO processes, continuous monitoring programs, or FISMA annual assessments. * U.S. Citizenship required (see below). * Active or current eligibility for a federal security clearance (Secret or above) is a plus and may be required for certain program support. Additional requirements: * This position requires the ability to access federal environments and/or have access to protected federal data. As a condition of employment for this position, the successful candidate must be able to submit documentation establishing U.S. Person status (e.g. a U.S. Citizen, National, Lawful Permanent Resident, Refugee, or Asylee. 22 CFR 120.15) upon hire. (P11672_3441312) #LI-Hybrid Below is the annual base salary range for candidates located in California (excluding San Francisco Bay Area), Colorado, Illinois, New York and Washington. Your actual base salary will depend on factors such as your skills, qualifications, experience, and work location. In addition, Okta offers equity (where applicable), bonus, and benefits, including health, dental and vision insurance, 401(k), flexible spending account, and paid leave (including PTO and parental leave) in accordance with our applicable plans and policies. To learn more about our Total Rewards program please visit: https://rewards.okta.com/us. The annual base salary range for this position for candidates located in California (excluding San Francisco Bay Area), Colorado, Illinois, New York, and Washington is between: $207,000—$284,900 USD The Okta Experience * Supporting Your Well-Being * Driving Social Impact * Developing Talent and Fostering Connection + Community We are intentional about connection. Our global community, spanning over 20 offices worldwide, is united by a drive to innovate. Your journey begins with an immersive, in-person onboarding experience designed to accelerate your impact and connect you to our mission and team from day one. Okta is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, marital status, age, physical or mental disability, or status as a protected veteran. We also consider for employment qualified applicants with arrest and convictions records, consistent with applicable laws. If reasonable accommodation is needed to complete any part of the job application, interview process, or onboarding please use this Form to request an accommodation. Notice for New York City Applicants & Employees: Okta may use Automated Employment Decision Tools (AEDT), as defined by New York City Local Law 144, that use artificial intelligence, machine learning, or other automated processes to assist in our recruitment and hiring process. In accordance with NYC Local Law 144, if you are an applicant or employee residing in New York City, please click here to view our full NYC AEDT Notice.

Staff Site Reliability Engineer, Kubernetes w/ active TS/SCI

Okta

Washington•Posted: Jul 14•Deadline: Aug 17

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. ABOUT OKTA Okta is the leading independent identity partner, securely connecting the right people to the right technologies at the right time. With over 20,000 customers and a billion registered users, we provide the foundation for secure enterprise management and seamless user experiences. As a trusted U.S. Federal vendor, we maintain FedRAMP High and IL4 compliance to support the government’s most critical missions. THE SRE TEAM Our team spans the globe and Okta’s platform to build, deliver, and maintain Okta’s legendary resiliency and reliability. We’re the SME’s for a vast number of synchronous and asynchronous workloads, data stores, and deployments, running the majority of our customer-facing Identity-as-a-Service platform. You’ll act as an advocate for reliability and a guide for global scale, ensuring our product is always available, always secure, and Always On. THE ROLE We are seeking a Staff Site Reliability Engineer (TS/SCI) to join our high-stakes National Security team. Based in the Washington, D.C. area, with on-site customer travel, you will serve as a technical leader, delivering secure, air-gapped solutions for our federal partners. Security Requirement: Must be able to obtain and maintain a U.S. security clearance (Secret or Top Secret) to the extent required by U.S. Government contracts. The selected candidate may be subject to drug testing to the extent required by U.S. Government contracts. WHAT YOU’LL DO * Cloud & Air-Gapped Infrastructure: Design and deliver AWS-based projects, primarily writing Terraform, Helm, and Go, and adapting our existing deployments for secure federal air-gapped environments. * Incident Management: Respond and remediate production incidents, performing deep-dive troubleshooting, driving rapid response, and implementing permanent preventive solutions. * Engineering Standards: Drive high-quality code and operational rigor through design reviews, code reviews, attention to detail, and deep technical expertise. * Technical Leadership: Mentor junior engineers and collaborate with cross-functional teams across the organization to deliver secure, enterprise-grade solutions. WHAT YOU’LL BRING CORE QUALIFICATIONS * Security Clearance: Active U.S. TS/SCI clearance. * Compliance Expertise: Proven experience navigating Federal and DoD compliance frameworks, specifically FedRAMP and Impact Level 6 (IL6). * Domain Authority: Deep expertise in architecting, deploying, and optimizing software within federal air-gapped environments. * Education: Bachelor’s degree in Computer Science or a related technical field (Master’s degree preferred). TECHNICAL EXPERTISE * Site Reliability Engineering: 6+ years of professional experience running production cloud workloads at scale. 4+ years of experience developing and troubleshooting web services on Kubernetes or similar orchestration layers. * Broad Database Knowledge: Significant hands-on experience with both relational and non-relational datastores. * Interactive and Batch Workloads: Demonstrated success delivering and maintaining both customer-facing interactive workloads and large-scale batch processing – ideally using data warehouse products such as Snowflake, Redshift, or Databricks. * Security & Engineering: Strong foundational knowledge of network security (authentication/authorization) and a commitment to rigorous software engineering best practices. Industry Experience: Prior experience supporting or building mission-critical Enterprise SaaS platforms. #LI-TM #LI-Hybrid P24512 Below is the annual base salary range for candidates located in California (excluding San Francisco Bay Area), Colorado, Illinois, New York and Washington. Your actual base salary will depend on factors such as your skills, qualifications, experience, and work location. In addition, Okta offers equity (where applicable), bonus, and benefits, including health, dental and vision insurance, 401(k), flexible spending account, and paid leave (including PTO and parental leave) in accordance with our applicable plans and policies. To learn more about our Total Rewards program please visit: https://rewards.okta.com/us. The annual base salary range for this position for candidates located in California (excluding San Francisco Bay Area), Colorado, Illinois, New York, and Washington is between: $174,000—$238,000 USD The Okta Experience * Supporting Your Well-Being * Driving Social Impact * Developing Talent and Fostering Connection + Community We are intentional about connection. Our global community, spanning over 20 offices worldwide, is united by a drive to innovate. Your journey begins with an immersive, in-person onboarding experience designed to accelerate your impact and connect you to our mission and team from day one. Okta is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, marital status, age, physical or mental disability, or status as a protected veteran. We also consider for employment qualified applicants with arrest and convictions records, consistent with applicable laws. If reasonable accommodation is needed to complete any part of the job application, interview process, or onboarding please use this Form to request an accommodation. Notice for New York City Applicants & Employees: Okta may use Automated Employment Decision Tools (AEDT), as defined by New York City Local Law 144, that use artificial intelligence, machine learning, or other automated processes to assist in our recruitment and hiring process. In accordance with NYC Local Law 144, if you are an applicant or employee residing in New York City, please click here to view our full NYC AEDT Notice.