Data Platform Security Engineer II, FedRAMP (Customer Identity)

The Role 

We seek a knowledgeable and execution-focused Security Engineer to take the security of our Customer Identity products and infrastructure to the next level. This role is a key member of the Security team embedded within the Customer Identity product unit and works across multiple functions to solve security challenges to support the growth of our global Customer Identity business. We are an engineering-focused team that seeks to stay on the cutting edge of security technology and the threat landscape. In this role you will work as part of a globally distributed team of talented engineers who share a passion for security and enjoy solving complex problems at scale. This role works closely with and alongside the members of the broader Okta Security team in support of Okta’s company-wide security strategy and Okta’s Secure Identity Commitment.

Responsibilities:

• Partner closely with teams and organizations across Engineering, Legal, and Product to embed sound technical data security and privacy practices in everything we ship and help uncover risks before they become issues.
• Establish a deep understanding of Okta Customer Identity products, data, and infrastructure.
• Collaborate when necessary with the Okta Security team on security operations.
• Build, deploy & maintain scalable and reliable security infrastructure services for customer identity products for customer identity products.
• Help meet our operational security commitments by thinking like an attacker, assessing the risk, and advising on mitigation strategies.
• Support data security investigations in coordination with the Okta Security, Privacy, and Legal teams, participate in root cause analysis and perform necessary remediations.

What this position is not: 

• Writing security detections or incident response.

Requirements:

• You have hands-on development experience writing microservices with Golang.
• You have 2+ years of experience in product security, data security, cloud security, or infrastructure security.
• You have experience performing threat models and code reviews.
• You have working knowledge and experience with one or more of the following:
• Database principles including familiarity with SQL, noSQL, data warehousing, and DBT.
• AWS and/or Azure security.
• Security automation and orchestration.
• User data protection and data loss prevention.
• Encryption, data anonymization, pseudonymization.
• You have strong written and verbal communication skills.
• You have experience working with a globally distributed and remote team.

Bonus points if:

• You have working knowledge and experience with one or more of the following:
• Privacy engineering.
• Data platforms such as Snowflake.

• Data pipelines and event streaming platforms such as Kafka.
• Full-stack engineering.
• Identity and access management.
• Vulnerability and threat management.
• Security detection and response.
• Governance, risk and compliance.

Requirements:

• This position requires the ability to access federal environments and/or have access to protected federal data.  As a condition of employment for this position, the successful candidate must be able to submit documentation establishing U.S. Person status (e.g. a U.S. Citizen, National, Lawful Permanent Resident, Refugee, or Asylee. 22 CFR 120.15) upon hire.

#LI-SH1

#LI-Remote

Last updated on Aug 15, 2024