Senior DevSecOps Engineer, Okta

• 5+ years of experience in DevSecOps, Application Security, or related roles
• Strong expertise in securing CI/CD pipelines (GitLab, Jenkins, Gearset, CircleCI, GitHub Actions, etc.)
• Proficient in DevOps and security tools, including Jenkins, Docker, Kubernetes, and various security scanning tools (e.g., Snyk, Semgrep, SonarQube)
• Hands-on experience with cloud security across AWS and Azure, including Infrastructure as Code (IaC) using Terraform and CloudFormation
• Skilled in scripting and automation using Python, Bash, and PowerShell
• Practical experience with AWS services such as EC2, S3, RDS, Lambda, VPC, and CloudFormation
• Some level of familiarity with compliance frameworks like FedRAMP and general security governance
• Experience working with federal agencies or government contracts is a plus
• Strong analytical and problem-solving skills with a security-first mindset
• The successful candidate must be able to submit documentation establishing U.S. Person status (e.g. a U.S. Citizen, National, Lawful Permanent Resident, Refugee, or Asylee. 22 CFR 120.15) upon hire

Desirable

• We are seeking a Senior DevSecOps Engineer to support our Federal Applications team in implementing secure, scalable, and automated DevSecOps solutions.
• This role requires expertise in CI/CD pipelines, infrastructure as code (IaC), security automation, and compliance to meet stringent government security standards.
• You will collaborate with cross-functional teams to drive security best practices and improve deployment efficiencies
• Design, implement, and maintain security best practices within CI/CD pipelines, automating security testing and vulnerability management
• Collaborate with development, security, and operations teams to integrate security tools and processes
• Implement security policies, compliance standards, and governance models (e.g., FedRAMP)
• Utilize AWS services such as EC2, S3, RDS, Lambda, API Gateway, CloudFront, and VPC to support scalable and secure deployments
• Develop and maintain security best practices for Infrastructure as Code (IaC), containers, and cloud environments
• Ensure application security tooling (DAST, SAST, SCA, credential scans) coverage in code repositories and deployment pipelines
• Experience with Salesforce DevOps, including CI/CD tooling (Gearset, Copado), sandbox management, and metadata deployments, is a strong plus