Staff Site Reliability Engineer - Network Infrastructure

Triwill Group; Bengaluru; On-site; INR 4,000,000 - 7,000,000; Full time

Job summary

Okta seeks a Staff Software Engineer - Infrastructure to architect and secure Okta's global core network fabric and multi-cloud layers from India. You will advance edge management in AWS/GCP, drive enterprise migrations, and enforce zero-trust across microservice proxies.

You will collaborate with global teams to maintain high-availability SLAs, protect against DDoS, and push IaC-driven automation. This role emphasizes scale, security, and automation in a fast-paced cloud environment.

Qualifications

• 8+ years of experience in production Cloud Infrastructure Engineering, Systems Engineering, or Core Cloud Networking roles.
• 5+ years of hands-on experience with deep enterprise cloud networking constructs like TGW, VPC peering, AWS Global Accelerator, Direct Connect, and their GCP equivalents.
• Strong working knowledge of edge delivery networks and edge compute stacks (Cloudflare for SaaS, Cloudflare Tunnels, Edge Workers).
• Deep understanding of network layers and security protocols including PKI, certificate rotation pipelines, Envoy/Nginx proxies.
• Advanced proficiency with Infrastructure-as-Code tools, specifically Terraform, in multi-account multi-region setups.
• Robust scripting/soft skills in Python or Go for infra tooling and automation.
• Expertise with telemetry/logging/monitoring systems (Splunk, Datadog, Prometheus, Grafana, CloudWatch, etc.).
• Familiarity with containerized infra elements (Docker, basic Kubernetes) interfacing with public load balancers.

Responsibilities

• Global Ingress & Routerless Evolution (CFSaaS): design Next-Gen traffic entryways using Cloudflare; migrate toward edge infrastructure and reduce legacy routing bottlenecks.
• Multi-Cloud & Core Networking: build and maintain Okta's multi-cloud backbone across AWS and GCP; implement hub-and-spoke models with TGW, AGA, and Network Connectivity Center.
• Zero-Trust Cryptographic Enforcement: implement TLS 1.3 and mTLS across proxies like Envoy/Nginx.
• Agentic SRE & AI Automation: design AI-driven telemetry pipelines and autonomous anomaly detection.
• DDoS Firefight Ownership & Mitigation: triage during IDC hours and deploy rapid WAF mitigations.
• Platform Automation (GitOps): champion IaC and drift elimination with Terraform modules.
• Documentation & Cross-Border Mentorship: produce global architecture docs and mentor a local team.

Skills

8+ years cloud infra exp

5+ years enterprise networking

Edge delivery networks

PKI & cert rotation

Terraform

Python

Go

Telemetry & monitoring

Docker

Kubernetes

Cloudflare

AWS TGW

Education

Bachelor's degree in Computer Science/Engineering or related field

Tools

Terraform

Envoy

Nginx

Cloudflare

AWS TGW

GCP Network Connectivity Center

Job description

Secure Every Identity, from AI to Human

Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk.

Workforce Identity Cloud

Okta Workforce Identity Cloud (WIC) provides easy, secure access for your workforce so you can focus on other strategic priorities, such as reducing costs and doing more for your customers.

If you like to be challenged and have a passion for solving large-scale automation, global traffic routing, and resilient cloud infrastructure problems, we would love to hear from you. The ideal candidate is someone who exemplifies the ethics of, “If you have to do something more than once, automate it” and who can rapidly self-educate on new network topologies, multi-cloud ecosystems, and agentic engineering models.

Position Overview

The Staff Software Engineer - Infrastructure will play a foundational role in architecting, evolving, and securing Okta's global core network fabric and multi-cloud platform layers. This position focuses on building highly resilient, edge management in AWS and GCP cloud, executing enterprise-wide cloud migrations (AWS to GCP), enforcing absolute Zero-Trust primitives (mTLS / TLS 1.3), and integrating cutting-edge AI automation layers (Agentic SRE) into our day-to-day operations.

As a Staff Engineer on this team, you will act as a key technical anchor in India, working closely with global counterparts to maintain Okta's high-availability SLAs while protecting the platform against active global DDoS attacks.

Key Responsibilities

• Global Ingress & Routerless Evolution (CFSaaS): Design and engineer Next-Gen traffic entryways utilizing Cloudflare for SaaS. Drive the migration toward modern, decentralized edge infrastructure—eliminating legacy hardware routing bottlenecks, shifting compute to Edge Workers, and lowering latency for millions of global requests.
• Multi-Cloud & Core Networking: Build, scale, and maintain Okta's multi-cloud backbone across AWS and GCP. Actively architect clean hub-and-spoke models utilizing AWS Transit Gateway (TGW), AWS Global Accelerator (AGA), and GCP Network Connectivity Center to unify converged enterprise product networks (Harmony).
• Zero-Trust Cryptographic Enforcement: Implement and manage strict cryptographic security controls at scale, driving the enforcement of TLS 1.3 externally and deep mTLS (Mutual TLS) mesh architectures internally across microservice proxies (Envoy/Nginx).
• Agentic SRE & AI Automation: Innovate on platform operations by designing deterministic playbooks and automated telemetry ingestion pipelines using AI models (LLMs/Agents). Move the team from reactive debugging to autonomous anomaly detection and self-healing systems.
• DDoS Firefight Ownership & Mitigation: Provide first-line technical triage during high-volume volumetric and application-layer (L7) DDoS attacks during India Data Center (IDC) hours. Analyze real-time proxy/VPC flow logs and implement rapid WAF mitigations to preserve cell isolation and tenant availability.
• Platform Automation (GitOps): Champion Infrastructure-as-Code (IaC) principles. Continuously identify and eliminate network configuration drifts across heterogeneous cloud landing zones by maintaining high-quality Terraform and automation modules.
• Documentation & Cross-Border Mentorship: Create detailed global architecture blueprints, technical documentation, and disaster recovery runbooks. Act as a technical mentor to a lean, high-performing 3-member local team while collaborating smoothly with US-time engineering leaders.

Required Qualifications

• 8+ years of experience in production Cloud Infrastructure Engineering, Systems Engineering, or Core Cloud Networking roles.
• 5+ years of hands-on experience with deep enterprise cloud networking constructs: AWS Transit Gateway (TGW), VPC peering, AWS Global Accelerator, Direct Connect, and GCP networking equivalents (Shared VPCs, Cloud Routers).
• Strong working knowledge of Edge Delivery networks and edge compute stacks (Cloudflare for SaaS, Cloudflare Tunnels, Custom Hostname routing, Edge Workers).
• Deep understanding of network layers and security protocols: HTTP/S routing, TCP/IP stack debugging (tcpdump, Wireshark), Public Key Infrastructure (PKI), certificate rotation pipelines, and proxy layers (Envoy, Nginx, API Gateways).
• Advanced proficiency with Infrastructure-as-Code (IaC) tools, specifically Terraform, for managing complex, multi-account and multi-region landing zones.
• Robust scripting and software development skills in Python or Go for building infrastructure tools, log parsers, and platform automation frameworks.
• Expertise with large-scale telemetry aggregation, logging, and monitoring systems (Splunk, Datadog, Prometheus, Grafana, AWS CloudWatch, or VPC Flow Logs).
• Familiarity with containerized infrastructure elements (Docker, basic Kubernetes deployments) as they interface with public network load balancers.

Preferred Qualifications

• Practical experience or strong architectural interest in implementing AI-assisted automation layers (LLM APIs, agentic orchestration frameworks) for parsing infrastructure metrics or automating repetitive on-call tasks.
• Prior experience supporting high-availability, multi-tenant SaaS platforms with strict cell-based architectures and zero-downtime requirements.
• Bachelor’s degree in Computer Science, Computer Engineering, or a related technical field (or equivalent professional experience).
• Certifications (Preferred): AWS Certified Advanced Networking - Specialty, Google Cloud Certified Professional Cloud Network Engineer, or equivalent industry networking credentials.

The Okta Experience

• Supporting Your Well-Being
• Driving Social Impact
• Developing Talent and Fostering Connection + Community

#LI_Hybrid

P24489_3505296

We are intentional about connection. Our global community, spanning over 20 offices worldwide, is united by a drive to innovate. Your journey begins with an immersive, in-person onboarding experience designed to accelerate your impact and connect you to our mission and team from day one. Okta is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, marital status, age, physical or mental disability, or status as a protected veteran. We also consider for employment qualified applicants with arrest and convictions records, consistent with applicable laws. If reasonable accommodation is needed to complete any part of the job application, interview process, or onboarding please use this Form to request an accommodation. Notice for New York City Applicants & Employees: Okta may use Automated Employment Decision Tools (AEDT), as defined by New York City Local Law 144, that use artificial intelligence, machine learning, or other automated processes to assist in our recruitment and hiring process. In accordance with NYC Local Law 144, if you are an applicant or employee residing in New York City, please click here to view our full NYC AEDT Notice.