Staff Software Engineer - Security & Identity

Okta; Bellevue (WA); On-site; USD 180,000 - 260,000; Full time

Benefits offered by this job

Equity (where applicable)

Health, dental, and vision insurance

401(k) matching

Job summary

Okta is seeking an experienced software security engineer to join the Workforce Identity Cloud Security Engineering group. The role focuses on designing and developing security solutions to harden frameworks and infrastructure while maintaining a weekly release cadence.

Ideal candidates have 8+ years in Java, 4+ years in security for apps and distributed systems, and strong expertise in cryptography, authentication, and cloud platforms (AWS/GCP).

Qualifications

• 8+ years designing and implementing software systems in Java.
• 4+ years building security solutions for applications and distributed systems.
• Experience with Application Security, Cryptography, Authentication, Authorization, Secrets management.

Responsibilities

• Liaise between engineering, security and product to develop security roadmap requirements.
• Evangelize security best practices across the engineering org.
• Research, design, implement and own security frameworks and features protecting Okta’s customers.
• Participate in cross-vertical code reviews with emphasis on Security.
• Break down complex problems and prototype security initiatives using Agile practices.
• Coach and mentor junior engineers.

Skills

Java development

Security solutions design

Application security

Cloud (AWS/GCP)

MySQL / Redis / Elasticsearch

Technical documentation

Post-Quantum Cryptography

AI agent systems security

Leadership in security

Education

B.S./M.S. in Computer Science or related field

Tools

AWS

GCP

Job description

Okta is seeking an experienced software security engineer to join the Workforce Identity Cloud Security Engineering group. The role focuses on designing and developing security solutions to harden frameworks and infrastructure while maintaining a weekly release cadence.

Ideal candidates have 8+ years in Java, 4+ years in security for apps and distributed systems, and strong expertise in cryptography, authentication, and cloud platforms (AWS/GCP).