Staff DevSecOps Engineer, Enterprise Technology

Okta
Bengaluru
Workplace: OnsiteFull timeFunction: Solutions Engineering & Sales EngineeringExperience: 8+ yearsSkills: ["Leadership","Cross-functional collaboration","Threat modeling","Incident response","Root cause analysis"]

Own the secure-by-design architecture for enterprise DevSecOps across an ecosystem of applications, spanning CI/CD governance, automated security pipelines, unified observability, edge defense, and identity controls. Lead multi-platform security automation for systems including Salesforce, NetSuite, Workday, and AEM, embedding SAST/DAST/SCA and secrets detection. Configure global CDN/WAF protections, drive API and IAM hardening, and manage incident response with continuous compliance auditing.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Okta
Okta
4 days ago

Staff DevSecOps Engineer, Enterprise Technology

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 9 hours agoStatus: Live

Job Summary

Own the secure-by-design architecture for enterprise DevSecOps across an ecosystem of applications, spanning CI/CD governance, automated security pipelines, unified observability, edge defense, and identity controls. Lead multi-platform security automation for systems including Salesforce, NetSuite, Workday, and AEM, embedding SAST/DAST/SCA and secrets detection. Configure global CDN/WAF protections, drive API and IAM hardening, and manage incident response with continuous compliance auditing.
Location: Bengaluru
Workplace: Onsite
Employment Type: Full time
Job Function: Solutions Engineering & Sales Engineering
Seniority: Mid level

Key Responsibilities

  • •Architect and scale enterprise-grade CI/CD and deployment frameworks across diverse systems including Salesforce, AEM/Web, NetSuite, and Workday.
  • •Embed shift-left security by integrating automated SAST, DAST, SCA, and secrets detection into developer workflows using tools like SonarQube, Snyk, GitGuardian, and OWASP ZAP.
  • •Standardize secrets management with HashiCorp Vault and safeguard dependencies, API integrations, and package deployments across enterprise platforms.
  • •Manage edge, CDN, and WAF protections (e.g., Cloudflare/CDNs), defining WAF rules, rate limiting, ModSecurity policies, and bot management to shield public endpoints.
  • •Build centralized security monitoring with Splunk/Datadog, lead incident response and RCA, and establish continuous compliance controls for SOX, SOC2, GDPR, and ISO 27001.

Key Requirements

  • •8+ years hands-on experience in DevSecOps, SRE, or Security Engineering, with 3+ years in a senior/lead capacity supporting enterprise applications.
  • •Secure and automate deployments across two or more enterprise platforms such as Salesforce, AEM Cloud/AEMaaCS, NetSuite, or Workday.
  • •Expertise in modern SCM and automation pipelines including GitHub Actions, CircleCI, Jenkins, Gearset, and Copado.
  • •Advanced hands-on edge and WAF security experience with Cloudflare, Akamai, or similar platforms (WAF rules, TLS automation, DDoS mitigation, DNS management).
  • •Proficiency embedding SAST/DAST/SCA and secrets scanning tools (e.g., Snyk, SonarQube, GitGuardian, OWASP ZAP, Prisma Cloud/Wiz) into developer workflows.
Experience:8+ yearsEnterprise applicationsDevSecOpsSRESecurity engineering
Skills:LeadershipCross-functional collaborationThreat modelingIncident responseRoot cause analysis
Certifications:CISSPCCSPAWS Certified Security – SpecialtySalesforce Certified Development Lifecycle & Deployment Architect
Languages:English
Tech Stack:SalesforceGearsetCopadoAdobe Experience Manager (AEM)AEMaaCSCircleCIGitHub ActionsNetSuiteWorkdayVercelNext.jsReactSonarQubeSnykPMDGitGuardianOWASP ZAPHashiCorp VaultCloudflareAkamai

Company Brief

Okta
Provides identity and access management cloud solutions that help organizations secure and manage user authentication, single sign-on, multi-factor authentication, and lifecycle management across applications and devices.
Industry: Cybersecurity
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: San Francisco, United States
Founded: 2009
WebsiteLinkedIn