Enterprise Security Engineer

Join Okta’s Enterprise Security team as a senior engineer. You’ll work closely with the Security, Business Technology and our Product Security teams to safeguard Okta’s endpoints, specifically our SaaS applications, API integrations, and Browser Plugins. You’ll use your skills in IT, security, and development to build, automate, secure, test, and operationalize solutions that achieve security and business objectives.

Preferred experience with enterprise security tools for API Security Posture Management, SSPM (SaaS Secure Posture Management), Identity Security Posture Management (ISPM), Unified Vulnerability Management (custom-built), Cyber Asset Attack Surface Management (CAASM), Cloud Asset Monitoring (cloudquery), DLP (Data Loss Prevention), Endpoint Detection and Response (EDR), Cloud Access Security Broker (CASB), and Data Loss Prevention (DLP). The ideal candidate should have a proven track record of automating cloud-first solutions and be comfortable communicating with support staff, technical leadership, and management.

The most important quality is an innate desire to make tools and people work together to solve complex problems with expertise, creativity, and a security-first mindset.

What you’ll be doing

• Collaborate with security architecture to design and evaluate solutions and processes for end-to-end SaaS security architecture.
• Own the implementation of relevant SaaS security solutions.
• Build and automate security checks for desktop applications, SaaS solutions, APIs (machine-to-machine) and browser plugins.
• Automate continuous posture checks into permission scope for third-party applications and business-critical systems.
• Own relationships with internal teams and contribute to asset and data discovery initiatives, risk assessment, security control contextualization, vulnerability triage, and mitigation.
• Work with internal stakeholders and vendors to evaluate new SaaS solutions before they are deployed or critical changes are made to existing SaaS solutions.
• Follow timezone-specific on-call schedules to respond to requests from incident response, GRC, IT, and end-users.
• Build and update custom automation to support the team’s workflows.
• Stay updated on emerging security solutions and tools.

What you’ll bring to the role

• 3+ years experience securing corporate SaaS applications (Salesforce, Google Workspace, Slack).
• 3+ years experience working with enterprise security solutions.
• 3+ years experience working in AWS or other cloud environments.
• 3+ years experience with a modern scripting language (Python preferred).
• Experience providing security guidance and mitigations to teams.
• Experience evaluating third-party software solutions.
• Strong written and verbal communication skills.
• A streamlined approach to meeting objectives in line with Okta's Secure Identity Commitment.

And extra credit if you have experience in any of the following!

• Experience leading projects
• Experience working with identity management technologies (MFA, SAML, WebAuthn)
• Experience working with the Okta Identity Platform

"This role requires in-person onboarding and travel to our Toronto office during the first week of employment."

#LI-LSS1