{"id":1597836,"url":"https://alion.io/job/okta-staff-site-reliability-engineer-security-gcp","title":"Staff Site Reliability Engineer, Security- GCP","company":{"id":4990,"name":"Okta","domain":"okta.com","url":"https://alion.io/company/okta","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":86,"open_postings":80,"ghost_share":0,"stale_share":0.563,"repost_share":0,"time_to_fill_p50_days":48,"computed_at":"2026-10-30T05:48:23Z"}},"role":"DevOps","role_family":"DevOps","seniority":"staff","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":33000,"max_usd":71000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":8},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"BGP","optional":false},{"name":"Chef","optional":false},{"name":"CI/CD","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"Crowdstrike","optional":false},{"name":"Defense in Depth","optional":false},{"name":"Falco","optional":false},{"name":"GCP","optional":false},{"name":"Google GKE","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"Linux","optional":false},{"name":"Nessus","optional":false},{"name":"Okta","optional":false},{"name":"osquery","optional":false},{"name":"PKI","optional":false},{"name":"Python","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"Ruby","optional":false},{"name":"Splunk","optional":false},{"name":"Amazon EKS","optional":true},{"name":"Machine Learning","optional":true},{"name":"Threat Modeling","optional":true},{"name":"Zero Trust","optional":true}],"status":"live","first_seen_at":"2025-02-28T11:01:54Z","employer_posted_date":"2026-09-21","last_verified_at":"2026-10-30T05:19:27Z","board_verified":true,"closed_at":null,"days_open":608,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":607},"description":"Secure Every Identity, from AI to Human\n Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence.\nThis is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk.\nOkta’s Workforce Identity Cloud Security Engineering group is looking for an experienced and passionate Staff Site Reliability Engineer to join a team focused on designing and developing Security solutions to harden our cloud infrastructure. We embrace innovation and pave the way to transform bright ideas into excellent security solutions that help run large-scale, critical infrastructure. We encourage you to prescribe defense-in-depth measures, industry security standards and enforce the principle of least privilege to help take our Security posture to the next level. Our Infrastructure Security team has a niche skill-set that balances Security domain expertise with the ability to design, implement, rollout infrastructure across multiple cloud environments without adding friction to product functionality or performance. We are responsible for the ever-growing need to improve our customer safety and privacy by providing security services that are coupled with the core Okta product.\nThis is a high-impact role in a security-centric, fast-paced organization that is poised for massive growth and success. You will act as a liaison between the Security org and the Engineering org to build technical leverage and influence the security roadmap. You will focus on engineering security aspects of the systems used across our services. Join us and be part of a company that is about to change the cloud computing landscape forever.\nAs a Staff Engineer, you should be able to identify gaps, propose innovative solutions, and contribute to roadmaps while driving alignment across multiple teams within the organization. Additionally, you should serve as a role model, providing technical mentorship to junior team members and fostering a culture of learning and growth\nWhat are we looking for?\n We are looking for a security-first SRE engineer who doesn't just \"flag\" issues but builds the automation to solve them. You should have a deep-seated intuition for cloud-native security and a proven track record of hardening large-scale GCP and AWS environments. As a Technical SME, you will design and build production infrastructure with a \"security-at-scale\" mindset.\nWhat You Will Work On?\nSecurity Evangelism: Lead initiatives to strengthen our security posture for critical infrastructure and promote best practices across the engineering organization.\nIncident Response & Reliability: Respond to production security incidents, perform root cause analysis, and build automated preventions to ensure high performance and reliability.\nAutomated Hardening: Identify manual security processes and automate them using custom tooling and CI/CD integrations.\nArchitecture & Documentation: Develop technical documentation, runbooks, and procedures for a 24x7 online environment.\nPlatform Evolution: Continuously evolve our monitoring platforms, moving from simple auditing to active, automated prevention.\nMinimum Required Knowledge, Skills, & Abilities:\n Experience: 8+ years of experience architecting and running complex cloud networking and infrastructure, with at least 7+ years specialized in DevSecOps or Cloud Security.\nGCP Expertise: Minimum 3+ years of deep, hands-on experience securing GCP ( GKE, GCE, Shared VPC etc).\nInfrastructure as Code (IaC): 10+ years of experience using Terraform and Chef to manage complex cloud resources and OS hardening.\nAutomation Mastery: Expert-level proficiency in Go, Python, or Ruby for building custom security tooling and automated remediation.\nHardened Containers: Proven track record of securing containerized workloads, including image scanning, K8s RBAC, and runtime security tools (e.g., CrowdStrike Falcon, Falco, or gVisor).\nUnflappable Troubleshooting: A \"see a problem, fix the problem\" mindset with the ability to debug complex networking, IAM, or performance issues under pressure.\nSecurity Foundations: Strong grasp of Linux internals, OS hardening (CIS benchmarks), and IP protocols (TLS/SSL, DNSSEC, BGP).\nEducation: BS in Computer Science or equivalent professional experience.\nKey Responsibilities:\n IAM & Secrets Management: Design and maintain large-scale production IAM policies and secrets management workflows .\nInfrastructure Hardening: Implement and maintain Public Key Infrastructure (PKI) and ensure all GCE/GKE environments meet strict compliance standards.\nOperational Excellence: Utilize industry-standard tools like OSQuery, Splunk, Chronicle, Nessus, or Qualys/ Crowdstrike to monitor system health and security telemetry.\nStrategic Rollouts: Lead the phased transition of security policies from Audit/Detection mode to Blocking/Prevention mode, ensuring zero impact on production uptime.\nBonus Points For:\n Multi-Cloud IAM Governance: Experience designing a unified IAM framework across AWS and GCP, utilizing federated Identities such as Workload, Workforce Identity Federation with understanding of SAML & OIDC auth mechanism and automated \"Least Privilege\" enforcement.\nCloud-Native Reliability Engineering: Deep understanding of multi-cloud reliability patterns, maintaining high availability (HA) during security patching or infrastructure-wide hardening.\nHardened Kubernetes Orchestration: Advanced experience securing GKE, EKS, and kOps, specifically implementing Pod Security Standards, Network Policies, and Admission Controllers for a \"Zero-Trust\" posture.\nThreat Modeling:Security Reviews & Threat Modeling at both Design & Implementation scope.\nThe Okta Experience\nSupporting Your Well-Being \nDriving Social Impact \nDeveloping Talent and Fostering Connection + Community\nWe are intentional about connection. Our global community, spanning over 20 offices worldwide, is united by a drive to innovate. Your journey begins with an immersive, in-person onboarding experience designed to accelerate your impact and connect you to our mission and team from day one.\nOkta is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, marital status, age, physical or mental disability, or status as a protected veteran. We also consider for employment qualified applicants with arrest and convictions records, consistent with applicable laws.\nIf reasonable accommodation is needed to complete any part of the job application, interview process, or onboarding please use this Form to request an accommodation.\nNotice for New York City Applicants & Employees: Okta may use Automated Employment Decision Tools (AEDT), as defined by New York City Local Law 144, that use artificial intelligence, machine learning, or other automated processes to assist in our recruitment and hiring process. In accordance with NYC Local Law 144, if you are an applicant or employee residing in New York City, please click here to view our full NYC AEDT Notice.","description_format":"text","description_chars":7395,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Identity Management","E-learning"],"lifecycle":[{"event":"open","at":"2026-10-01T18:22:16Z"}],"visa":[],"liveness":{"score":10,"band":"cold","label":"Long shot","p_open":1,"p_active":0.346,"p_room":0.28,"age_days":608,"expected_fill_days":48,"reasons":["conf:0","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-30T05:48:23Z"},"pay":null,"html_url":"https://alion.io/job/okta-staff-site-reliability-engineer-security-gcp","json_url":"https://alion.io/job/okta-staff-site-reliability-engineer-security-gcp.json","meta":{"generated_at":"2026-10-30T07:22:07Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":10353,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4990},"rest":"https://alion.io/mcp/rest/get_company?id=4990"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fokta-staff-site-reliability-engineer-security-gcp"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fokta-staff-site-reliability-engineer-security-gcp"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fokta-staff-site-reliability-engineer-security-gcp"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/okta-staff-site-reliability-engineer-security-gcp\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fokta-staff-site-reliability-engineer-security-gcp"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1597836}},{"tool":"search_jobs","arguments":{"company":"okta.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1597836},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}