Senior DevSecOps Engineer

The Business Technology Team

At Okta, the Business Technology (BT) team drives internal efficiency through secure, scalable, and innovative systems. BT partners with teams across the company to build and support the infrastructure, automation, and enterprise applications that keep operations running smoothly. Focused on enabling productivity and aligning technology with business goals, BT plays a vital role in both day-to-day operations and long-term strategic growth.

The Senior DevSecOps Engineer Opportunity

We are seeking a Senior DevSecOps Engineer to support our Federal Applications team in implementing secure, scalable, and automated DevSecOps solutions. This role requires expertise in CI/CD pipelines, infrastructure as code (IaC), security automation, and compliance to meet stringent government security standards. You will collaborate with cross-functional teams to drive security best practices and improve deployment efficiencies.

What You’ll Be Doing

• Design, implement, and maintain security best practices within CI/CD pipelines, automating security testing and vulnerability management
• Collaborate with development, security, and operations teams to integrate security tools and processes
• Implement security policies, compliance standards, and governance models (e.g., FedRAMP)
• Utilize AWS services such as EC2, S3, RDS, Lambda, API Gateway, CloudFront, and VPC to support scalable and secure deployments
• Develop and maintain security best practices for Infrastructure as Code (IaC), containers, and cloud environments
• Ensure application security tooling (DAST, SAST, SCA, credential scans) coverage in code repositories and deployment pipelines
• Experience with Salesforce DevOps, including CI/CD tooling (Gearset, Copado), sandbox management, and metadata deployments, is a strong plus

What You Bring To The Role

• 5+ years of experience in DevSecOps, Application Security, or related roles
• Strong expertise in securing CI/CD pipelines (GitLab, Jenkins, Gearset, CircleCI, GitHub Actions, etc.)
• Proficient in DevOps and security tools, including Jenkins, Docker, Kubernetes, and various security scanning tools (e.g., Snyk, Semgrep, SonarQube)
• Hands-on experience with cloud security across AWS and Azure, including Infrastructure as Code (IaC) using Terraform and CloudFormation
• Skilled in scripting and automation using Python, Bash, and PowerShell
• Practical experience with AWS services such as EC2, S3, RDS, Lambda, VPC, and CloudFormation
• Some level of familiarity with compliance frameworks like FedRAMP and general security governance
• Experience working with federal agencies or government contracts is a plus
• Strong analytical and problem-solving skills with a security-first mindset

Preferred Certifications:

• AWS Certifications (any of the following highly preferred):
• • AWS Certified Solutions Architect – Associate/Professional
  • AWS Certified Security – Specialty
  • AWS Certified DevOps Engineer – Professional

Additional requirements:

This position requires the ability to access federal environments and/or have access to protected federal data.  As a condition of employment for this position, the successful candidate must be able to submit documentation establishing U.S. Person status (e.g. a U.S. Citizen, National, Lawful Permanent Resident, Refugee, or Asylee. 22 CFR 120.15) upon hire.