SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Okta is seeking a Staff DevSecOps Engineer to serve as the technical authority and architectural owner for embedding security, compliance, and automated release practices across the enterprise applications ecosystem. This role bridges development, security, and enterprise operations, focusing on critical business systems including Salesforce, NetSuite, Workday, Adobe Experience Manager (AEM), and modern web stacks (Vercel/Next.js).
Key responsibilities include architecting and scaling enterprise-grade CI/CD and deployment frameworks across diverse platforms using tools like Gearset/Copado, CircleCI, and GitHub Actions. You will integrate automated security scanning (SAST, DAST, SCA, secrets detection) using SonarQube, Snyk, PMD, GitGuardian, and OWASP ZAP into development workflows. You'll standardize secrets management via HashiCorp Vault and safeguard third-party dependencies and API integrations.
On the edge and network security front, you will manage enterprise CDN policies via Cloudflare to protect against DDoS and layer-7 attacks, define Web Application Firewall (WAF) rules, rate limiting, and bot management strategies. You'll collaborate with InfoSec to manage identity policies, RBAC, OAuth 2.0, JWT authentication, and SAML/SSO integrations across platforms, while architecting secure API gateways and protecting GraphQL endpoints.
You will build and optimize real-time SIEM logging and security analytics in Splunk or Datadog to track cross-platform threats and unauthorized changes. You'll lead technical response for platform security events, perform root cause analysis, and establish continuous compliance controls for SOX, SOC2, GDPR, and ISO 27001. Additionally, you'll drive DevSecOps culture by mentoring engineers in secure coding practices and establishing self-service security tooling.
This is a technical leadership role requiring 8+ years of hands-on DevSecOps, SRE, or Security Engineering experience, with at least 3+ years in a senior or lead capacity supporting enterprise applications. Proven experience securing and automating deployments across multiple enterprise platforms (Salesforce, AEM, NetSuite, Workday) is essential.
