Principal Site Reliability Engineer

Get to know Okta

Okta is The World's Identity Company. We free everyone to safely use any technology, anywhere, on any device or app. Our flexible and neutral products, Okta Platform and Auth0 Platform, provide secure access, authentication, and automation, placing identity at the core of business security and growth.

At Okta, we celebrate a variety of perspectives and experiences. We are not looking for someone who checks every single box - we're looking for lifelong learners and people who can make us better with their unique experiences.

Join our team We're building a world where Identity belongs to you.

Okta's Workforce Identity Cloud Security Engineering group is looking for an experienced and passionate Principal Site Reliability Engineer to join a team focused on designing and developing Security solutions to harden our cloud infrastructure. We embrace innovation and pave the way to transform bright ideas into excellent security solutions that help run large-scale, critical infrastructure. We encourage you to prescribe defense-in-depth measures, industry security standards and enforce the principle of least privilege to help take our Security posture to the next level. Our Infrastructure Security team has a niche skill-set that balances Security domain expertise with the ability to design, implement, rollout infrastructure across multiple cloud environments without adding friction to product functionality or performance. We are responsible for the ever-growing need to improve our customer safety and privacy by providing security services that are coupled with the core Okta product.

This is a high-impact role in a security-centric, fast-paced organization that is poised for massive growth and success. You will act as a liaison between the Security org and the Engineering org to build technical leverage and influence the security roadmap. You will focus on engineering security aspects of the systems used across our services. Join us and be part of a company that is about to change the cloud computing landscape forever.

As a Principal Security SRE in this team, you will serve as a key technical authority, shaping the organization's security and reliability roadmap. You are expected to drive technical excellence, embedding security and resilience into every aspect of our production environment.

Key Leadership Expectations:

Strategic Initiative Driver: Lead organization-wide initiatives to enhance our security posture and overall SRE discipline, directly influencing how services are built and operated across all engineering teams.

DevSecOps Champion: Champion the DevSecOps transformation, specifically by driving the adoption and maturity of Security-as-Code and Policy-as-Code initiatives. This includes defining frameworks for automated compliance and governance.

Security & SRE Excellence: Identify systemic security and SRE process gaps, establish robust best practices, and introduce innovative solutions to maximize system reliability and minimize security risks at scale.

Technical Role Model: Act as a technical role model and mentor, using your deep expertise in cloud security and SRE principles to influence and guide engineering peers, elevating the collective technical skill of the entire organization.

You will work on:

Identifying and automating manual processes

Automate the remediation of security findings and compliance violations using Policy-as-Code framework

Continuously evolving our monitoring tools and platform

Promoting and applying best practices for building secure and reliable services across engineering

Developing and maintaining technical documentation, runbooks, and procedures

Be a technical SME for a team that designs and builds Okta's production infrastructure, focusing on security at scale in the cloud.

Define and enforce secure baseline configurations for all cloud and containerized environments, ensuring proactive risk mitigation against common threats.

You are an ideal candidate if you:

Are always willing to go the extra mile: see a problem, fix the problem.

Are passionate about encouraging the development of engineering peers and leading by example.

Have experience automating, securing, and running large-scale production IAM and containerized services in AWS (EC2, ECS, KMS, Kinesis, RDS), GCP (GKE, GCE) or other cloud providers.

Have deep knowledge of CI/CD principles, Linux fundamentals, OS hardening, networking concepts, and IP protocols.

Have a deep understanding and familiarity with configuration management tools like Chef and Terraform.

Have expert-level abilities in operational tooling languages such as Ruby, Python, Go and shell, and use of source control.

Have experience with industry-standard security tools like Nessus, Qualys, OSQuery, Splunk, etc.

Have experience with Public Key Infrastructure (PKI) and secrets management

Lead technical design and architecture decisions, and align project members towards the same goal and standards.

Bonus points for:

Proven ability to lead complex Threat Modeling exercises across critical systems and translate findings into secure coding and deployment requirements.

Experience in implementing IAM solutions for GCP and AWS

In-depth knowledge of compliance standards and automating compliance controls as code

Minimum Required Knowledge, Skills, Abilities, and Qualities:

12 + years of experience architecting and running complex AWS or other cloud networking infrastructure resources

6+ years of experience with Chef and Terraform

3+ years of experience in kubernetes

Unflappable troubleshooting skills

Proven experience in collaborating across teams to deliver complex horizontal projects

Strong leadership skills

Strong written and verbal communication skills.

Strong Linux understanding and experience.

Strong security background and knowledge.

BS In computer science (or equivalent experience).

What you can look forward to as a Full-Time Okta employee

• Amazing Benefits
• Making Social Impact
• Developing Talent and Fostering Connection + Community at Okta

Okta cultivates a dynamic work environment, providing the best tools, technology and benefits to empower our employees to work productively in a setting that best and uniquely suits their needs. Each organization is unique in the degree of flexibility and mobility in which they work so that all employees are enabled to be their most creative and successful versions of themselves, regardless of where they live. Find your place at Okta today

Some roles may require travel to one of our office locations for in-person onboarding.

Okta is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, marital status, age, physical or mental disability, or status as a protected veteran. We also consider for employment qualified applicants with arrest and convictions records, consistent with applicable laws.

If reasonable accommodation is needed to complete any part of the job application, interview process, or onboarding please use this Form to request an accommodation.

Okta is committed to complying with applicable data privacy and security laws and regulations. For more information, please see our Personnel and Job Candidate Privacy Notice at

Okta

The foundation for secure connections between people and technology

Okta is the leading independent provider of identity for the enterprise. The Okta Identity Cloud enables organizations to securely connect the right people to the right technologies at the right time. With over 7,000 pre-built integrations to applications and infrastructure providers, Okta customers can easily and securely use the best technologies for their business. More than 19,300 organizations, including JetBlue, Nordstrom, Slack, T-Mobile, Takeda, Teach for America, and Twilio, trust Okta to help protect the identities of their workforces and customers.