Create a free account
One signup unlocks everything for this job:
- See your personalized profile match score
- See the skills this role is missing for you
- Apply to this job and track your application
- Generate an AI cover letter for this role
Bengaluru · On-site · 8-11 Yrs · Oct 7
Software Development · 5001 to 10000 Employees · San Francisco, US
Okta is the World’s Identity Company. As the leading independent Identity partner, we free everyone to safely use any technology—anywhere, on any device or app. The most trusted brands trust Okta to enable secure access, authentication, and automation. With flexibility and neutrality at the core of our Okta Workforce Identity and Customer Identity Clouds, business leaders and developers can focus on innovation and accelerate digital transformation, thanks to customizable solutions and more than 7,000 pre-built integrations. We’re building a world where Identity belongs to you. Learn more at okta.com.
Hiring: Engineering
What employees say
+ Good place to work. Teams in banglore are very talented and helpful.
− No cons I found so far
More reviews on the company profile.
Interview experience · Quality Assurance
Was really fun and great with process, equally different enough to understand. Around 5 rounds were there and each of them are quite difficult. Lots of logical questions and coding round were there.
Difficult difficulty · Pune · 56 reports
More interview insightsJob description
Overview
Secure Every Identity, from AI to Human
Responsibilities
- Multi-Platform CI/CD Governance: Architect and scale enterprise-grade CI/CD and deployment frameworks across diverse systems (Salesforce via Gearset/Copado, AEM/Web via CircleCI/GitHub Actions, NetSuite, and Workday).
- Shift-Left Security Pipeline: Integrate automated SAST, DAST, Software Composition Analysis (SCA), and secrets detection into workflows using tools like SonarQube, Snyk, PMD, GitGuardian, and OWASP ZAP.
- Secrets & Supply Chain Management: Standardize secrets management (e.g., HashiCorp Vault) and safeguard third-party dependencies, API integrations, and package deployments across all enterprise platforms.
- Global Edge Protection: Manage, configure, and optimize enterprise CDN policies via Cloudflare (or platform CDNs) to protect web properties and API endpoints against DDoS, volumetric, and layer-7 attacks.
- Traffic Filtering & WAF Management: Define and enforce Web Application Firewall (WAF) rules, rate limiting, ModSecurity policies, and bot management strategies to shield public-facing endpoints (AEM, Vercel apps, custom portals)
- Enterprise IAM & SSO Governance: Collaborate with InfoSec to manage identity policies, RBAC, OAuth 2.0, JWT authentication, and SAML/SSO integrations across platforms (Salesforce, NetSuite, AEM Cloud, Workday, Okta/Entra ID).
- Headless & API Security: Architect secure API gateways, protect GraphQL endpoints, manage CORS policies, and enforce API key lifecycle management for decoupled frontend applications (Next.js/React deployed on Vercel).
- Centralized Security Monitoring: Build and optimize real-time SIEM logging and security analytics in Splunk (or Datadog) to track cross-platform threats, unauthorized changes, and anomalous API behavior.
- Incident Management & Root Cause Analysis: Lead technical response for platform security events, perform root cause analysis (RCA), and analyze heap/thread dumps, log trails, and network traffic.
- Automated Compliance & Risk Auditing: Establish continuous compliance controls for regulatory and corporate standards (SOX, SOC2, GDPR, ISO 27001) across SaaS and PaaS tools.
- Cross-Functional Leadership: Partner with Enterprise Architects, Engineering leads, and Information Security to establish DevSecOps standards and threat modeling practices.
- DevSecOps Culture: Drive self-service tooling, create developer security guidelines, and mentor senior and mid-level engineers in secure coding and automation best practices.
Qualifications
- Multi-Platform Ecosystem Knowledge: Proven experience securing and automating deployments across two or more enterprise platforms: Salesforce, Adobe Experience Manager (AEM Cloud/AEMaaCS), NetSuite, or Workday.
- DevOps & Pipeline Automation: Deep expertise with modern SCM and automation pipelines including GitHub Actions, CircleCI, Jenkins, Gearset, and Copado.
- Edge & WAF Security: Advanced hands-on experience managing Cloudflare, Akamai, or similar edge security platforms (WAF rules, SSL/TLS automation, DDoS mitigation, DNS management).
- Security Tooling Expertise: Proficiency in embedding SAST/DAST/SCA and secrets scanning tools (Snyk, SonarQube, GitGuardian, OWASP ZAP, Prisma Cloud/Wiz) into developer workflows.
- SIEM & Monitoring: Expertise with Splunk or Datadog for log aggregation, security dashboard creation, threat hunting, and automated alerting.
- Scripting & IaC: Mastery in Python, Bash, or Go, alongside Infrastructure-as-Code (Terraform) for automated environment provisioning and security guardrails.
- API & Frontend Integration Security: Solid grasp of API security (REST, GraphQL, JWT, OAuth 2.0) and secure deployment patterns for modern frontend setups (Next.js/React on Vercel).
- Industry certifications such as CISSP, CCSP, AWS Certified Security – Specialty, or platform-specific certifications (e.g., Salesforce Certified Development Lifecycle & Deployment Architect).
- Familiarity with AI-assisted DevOps tools for code scanning, release predictability, and threat identification.
- Supporting Your Well-Being
- Driving Social Impact
- Developing Talent and Fostering Connection + Community
Verify Python for this role
Free PRACTICE for Python adds a verified skill signal that can boost how roles like this rank for you — optional, not required to browse or apply.
Sign up — verify Python free →Want match scores and deeper insight? Create a free candidate profile
Job application FAQ
Last updated 7 October 2026
- How do I apply for Staff DevSecOps Engineer, Enterprise Technology at Okta?
- Open this job on Feedback AI and sign up free (or sign in). You can apply from the job detail page; match scores and skill gaps appear when your profile is complete. Okta may attach structured assessments to interview rounds after you apply.
- Does Feedback AI show a match score for this Staff DevSecOps Engineer, Enterprise Technology role?
- Yes after you add a resume or skills. Match score ranks this role against your profile — skills met, gaps, level, and location — so you prioritise applications where fit is strongest.
- Is Staff DevSecOps Engineer, Enterprise Technology remote or on-site in Bengaluru, Karnataka?
- This listing is marked on_site with location Bengaluru, Karnataka. Confirm details on the job description before applying.
- What skills matter for this Staff DevSecOps Engineer, Enterprise Technology role at Okta?
- This is a lead Staff DevSecOps Engineer, Enterprise Technology role. Key skills include skills listed in the job description. Feedback AI highlights matched vs missing skills on your profile after signup.