Senior Security Engineer - Secret Management FedRamp (Customer Identity)

The Role 

We seek a knowledgeable and development focused Security Engineer, who will build microservices to secure Customer Identity Products and Infrastructure. This role is a key member of the Security team embedded within the Customer Identity product unit and works across multiple functions to solve security challenges to support the growth of our global Customer Identity business. We are an engineering-focused team that seeks to stay on the cutting edge of security technology and the threat landscape. In this role you will work as part of a globally distributed team of talented engineers who share a passion for security and enjoy solving complex problems at scale. This role works closely with and alongside the members of the broader Okta Security team in support of Okta’s company-wide security strategy and Okta’s Secure Identity Commitment.

Responsibilities:

• Work across a globally distributed product-aligned team of security engineers
• Establish a deep understanding of Okta Customer Identity products and infrastructure
• Collaborate when necessary with the Okta Security team on security operations
• Build, deploy & maintain scalable and reliable infrastructure services as well as security solutions for customer identity products
• Build, deploy & maintain automation to improve platform security capabilities at scale including logging, threat detection and compliance benchmarks to increase our security posture 
• Help meet our operational security commitments by thinking like an attacker, assessing the risk, and advising on mitigation strategies
• Support security investigations in coordination with the Okta Security team, participate in root cause analysis and perform necessary remediations.
• Support stakeholders by proposing mitigation strategies for end-of-life software and security vulnerability and patch management

What this position is not: 

• Writing security detections or incident response
• Application security, dedicated code reviews, or compliance focused

Requirements:

• You have 3+ years of hands-on development experience writing microservices with Golang.
• You have 3+ years of experience in cloud infrastructure security, product security
• You have working knowledge and hands on development experience with one or more of the following:
  • AWS and/or Azure security
  • Kubernetes

• You have strong knowledge in OWASP Top 10 and secure coding best practices
• You have strong foundation on secure software development lifecycle best practices
• You have strong written and verbal communication skills
• You have experience working with a globally distributed and remote team.

Bonus points if:

• You have working knowledge and experience with one or more of the following:
• Full-stack engineering
• Site reliability engineering
• Identity and access management
• Vulnerability and threat management
• Security detection and response
• Governance, risk and compliance

Required:

• This position requires the ability to access federal environments and/or have access to protected federal data.  As a condition of employment for this position, the successful candidate must be able to submit documentation establishing U.S. Person status (e.g. a U.S. Citizen, National, Lawful Permanent Resident, Refugee, or Asylee. 22 CFR 120.15) upon hire.

#LI-SH1

#LI-Remote