Senior DevSecOps Engineer

About the position

Okta is The World’s Identity Company. We free everyone to safely use any technology—anywhere, on any device or app. Our Workforce and Customer Identity Clouds enable secure yet flexible access, authentication, and automation that transforms how people move through the digital world, putting Identity at the heart of business security and growth. At Okta, we celebrate a variety of perspectives and experiences. We are not looking for someone who checks every single box - we’re looking for lifelong learners and people who can make us better with their unique experiences. Join our team! We’re building a world where Identity belongs to you. The Business Technology Team drives internal efficiency through secure, scalable, and innovative systems. BT partners with teams across the company to build and support the infrastructure, automation, and enterprise applications that keep operations running smoothly. Focused on enabling productivity and aligning technology with business goals, BT plays a vital role in both day-to-day operations and long-term strategic growth.

Responsibilities

• Design, implement, and maintain security best practices within CI/CD pipelines, automating security testing and vulnerability management
• Collaborate with development, security, and operations teams to integrate security tools and processes
• Implement security policies, compliance standards, and governance models (e.g., FedRAMP)
• Utilize AWS services such as EC2, S3, RDS, Lambda, API Gateway, CloudFront, and VPC to support scalable and secure deployments
• Develop and maintain security best practices for Infrastructure as Code (IaC), containers, and cloud environments
• Ensure application security tooling (DAST, SAST, SCA, credential scans) coverage in code repositories and deployment pipelines

Requirements

• 5+ years of experience in DevSecOps, Application Security, or related roles
• Strong expertise in securing CI/CD pipelines (GitLab, Jenkins, Gearset, CircleCI, GitHub Actions, etc.)
• Proficient in DevOps and security tools, including Jenkins, Docker, Kubernetes, and various security scanning tools (e.g., Snyk, Semgrep, SonarQube)
• Hands-on experience with cloud security across AWS and Azure, including Infrastructure as Code (IaC) using Terraform and CloudFormation
• Skilled in scripting and automation using Python, Bash, and PowerShell
• Practical experience with AWS services such as EC2, S3, RDS, Lambda, VPC, and CloudFormation
• Some level of familiarity with compliance frameworks like FedRAMP and general security governance
• Experience working with federal agencies or government contracts is a plus
• Strong analytical and problem-solving skills with a security-first mindset

Nice-to-haves

• Experience with Salesforce DevOps, including CI/CD tooling (Gearset, Copado), sandbox management, and metadata deployments
• AWS Certifications (any of the following highly preferred): AWS Certified Solutions Architect – Associate/Professional, AWS Certified Security – Specialty, AWS Certified DevOps Engineer – Professional

Benefits

• Health, dental and vision insurance
• 401(k)
• Flexible spending account
• Paid leave (including PTO and parental leave)
• Equity (where applicable)
• Bonus