Staff DevSecOps Engineer – Vulnerability Management (TS/SCI)

Okta is seeking a highly skilled, hands-on Staff DevSecOps Engineer (TS/SCI) to join its Security Vulnerability Management team, with a focus on issue management and remediation.

The team provides foundational infrastructure vulnerability scanning and reporting capabilities that help corporate engineering teams operate securely, reliably, and at scale. In this role, you will work directly within service environments alongside engineering and operations teams to strengthen security across infrastructure, cloud platforms, and business systems.

You will build centralized security posture analytics and reporting capabilities that consolidate findings, remediation status, and risk data from Okta's security tools. Your work will focus on automating issue tracking and ownership assignment, identifying and routing unowned findings, accelerating remediation, and developing solutions where existing remediation capabilities are insufficient.

You will also explore AI-driven approaches to simplify security posture management, improve data trust, automate analysis and prioritization, and deliver actionable insights that help manage security risks at scale.

The ideal candidate combines deep technical security expertise with strong troubleshooting skills and a proven ability to improve the security posture management lifecycle.

Key Responsibilities

• Serve as a security subject matter expert in solution engineering and architecture reviews related to vulnerability scanning and reporting automation.
• Collaborate with Site Reliability Engineering (SRE) teams to manage update pipelines and enforce baseline compliance standards.
• Develop agentic automation to scale security posture scanning, reporting, issue remediation, and patch validation.
• Lead technical initiatives to evaluate, design, and implement internally developed security systems and feature enhancements.
• Build, maintain, and improve custom automation and cloud infrastructure using Terraform or similar tools to support team and AI workflows and enforce security controls.
• Develop integrations with APIs, cloud platforms, and security infrastructure to improve vulnerability detection, response, and remediation.
• Write and maintain scripts and automation, primarily using Python, to streamline security operations.
• Use Python, Bash, or Go alongside Infrastructure as Code tools such as Terraform to automate environment provisioning and implement security guardrails.
• Establish monitoring and alerting for security posture issues, misconfigurations, and threats across endpoints, SaaS applications, and cloud workloads.
• Proactively identify and remediate security gaps while staying informed about emerging threats, security solutions, and industry tools.

Required Qualifications

Professional Experience

• 10+ years of experience in Security Engineering, DevSecOps, Infrastructure Security, or SaaS applications within a large corporate environment.
• 10+ years of coding and scripting experience, focused on building automation and custom tooling for security engineering teams.
• Experience developing and maintaining ETL/ELT pipelines to onboard security data into Okta's security data lake.
• Ability to build and maintain scalable, fault-tolerant data pipelines for processing vulnerability data.
• A proven track record of automating security controls and workflows using a cloud-first approach.
• Experience using Terraform and other Infrastructure as Code tools to orchestrate security infrastructure.
• Familiarity with CI/CD pipelines for security automation and configuration drift management.

Technical Skills

• Strong programming and scripting skills, particularly in Python, Bash, or Go.
• Experience integrating APIs, cloud platforms, and security tools.
• Knowledge of infrastructure vulnerability scanning, security posture analytics, issue management, and automated remediation workflows.
• Strong communication skills, with the ability to collaborate with technical teams, support staff, executive leadership, and external vendors.

Preferred Qualifications

• At least two years of experience developing engineering solutions in highly regulated environments.
• Experience automating commercial or open-source vulnerability and misconfiguration scanning and reporting tools across infrastructure and IP-based assets, containers, Cloud Security Posture Management (CSPM), and Cloud-Native Application Protection Platforms (CNAPP).
• Familiarity with tools such as Qualys, TenableSC, Prisma Cloud, Wiz, Orca, Lacework, Paramify, Atlassian Jira, and ServiceNow.
• Familiarity with security standards, frameworks, and resources such as Common Vulnerabilities and Exposures (CVE), Common Vulnerability Scoring System (CVSS), Exploit Prediction Scoring System (EPSS), OWASP, and the CISA Known Exploited Vulnerabilities (KEV) catalog.
• Experience with federal and Department of Defense (DoD) compliance frameworks, particularly FedRAMP and Impact Level 6 (IL6).

Additional Requirements

U.S. Work Eligibility

• U.S. soil requirement: The employee must be physically located on U.S. soil, defined as the 50 states, the District of Columbia, or U.S. outlying areas under Federal Acquisition Regulation (FAR) 2.101.
• U.S. person status: The employee must qualify as a U.S. person under applicable law. This includes eligible U.S. citizens, U.S. nationals, lawful permanent residents, and other protected individuals as defined by the relevant statutes.
• Visa restriction: Working in the United States on a U.S. visa does not, by itself, qualify an individual as a U.S. person for this position.

Security Clearance and Compliance

• Active U.S. TS/SCI security clearance with Full Scope Polygraph.
• Demonstrated compliance expertise involving federal and DoD frameworks, specifically FedRAMP and Impact Level 6 (IL6).

Salary and Compensation

The annual base salary range for candidates located in California (excluding the San Francisco Bay Area), Colorado, Illinois, New York, and Washington is $161,000–$221,000 USD.

Actual base salary depends on factors such as skills, qualifications, experience, and work location. The total compensation package may also include equity, where applicable, bonuses, and benefits.

Benefits include:

• Health, dental, and vision insurance.
• A 401(k) plan.
• Flexible spending accounts.
• Paid time off and parental leave, subject to applicable plans and policies.