Staff Site Reliability Engineer, Security- GCP
Okta · Bengaluru · Posted 2026-07-18
Tech stack: AWS, GCP, Kubernetes
Apply on the company site · Get a referral for this role
Okta salary & ratings · Okta interview process · More live openings
About the role
Responsibilities:
- IAM & Secrets Management: Design and maintain large-scale production IAM policies and secrets management workflows.
- Infrastructure Hardening: Implement and maintain Public Key Infrastructure (PKI) and ensure all GCE/GKE environments meet strict compliance standards.
- Operational Excellence: Utilize industry-standard tools like OSQuery, Splunk, Chronicle, Nessus, or Qualys/ Crowdstrike to monitor system health and security telemetry.
- Strategic Rollouts: Lead the phased transition of security policies from Audit/Detection mode to Blocking/Prevention mode, ensuring zero impact on production uptime.
- Bonus Points For: Multi-Cloud IAM Governance: Experience designing a unified IAM framework across AWS and GCP, utilizing federated Identities such as Workload, Workforce Identity Federation with understanding of SAML & OIDC auth mechanism and automated "Least Privilege" enforcement.
- Cloud-Native Reliability Engineering: Deep understanding of multi-cloud reliability patterns, maintaining high availability (HA) during security patching or infrastructure-wide hardening.
- Hardened Kubernetes Orchestration: Advanced experience securing GKE, EKS, and kOps, specifically implementing Pod Security Standards, Network Policies, and Admission Controllers for a "Zero-Trust" posture.
- Threat Modeling:Security Reviews & Threat Modeling at both Design & Implementation scope.
- Supporting Your Well-Being
- Driving Social Impact
- Developing Talent and Fostering Connection + Community
Qualifications:
- Official department: Security Engineering-695.
- Location listed by Okta: Bangalore, India.
Qualifications
- Official department: Security Engineering-695.
- Location listed by Okta: Bangalore, India.
Responsibilities
- IAM & Secrets Management: Design and maintain large-scale production IAM policies and secrets management workflows.
- Infrastructure Hardening: Implement and maintain Public Key Infrastructure (PKI) and ensure all GCE/GKE environments meet strict compliance standards.
- Operational Excellence: Utilize industry-standard tools like OSQuery, Splunk, Chronicle, Nessus, or Qualys/ Crowdstrike to monitor system health and security telemetry.
- Strategic Rollouts: Lead the phased transition of security policies from Audit/Detection mode to Blocking/Prevention mode, ensuring zero impact on production uptime.
- Bonus Points For: Multi-Cloud IAM Governance:
- Experience designing a unified IAM framework across AWS and GCP, utilizing federated Identities such as Workload, Workforce Identity Federation with understanding of SAML & OIDC auth mechanism and automated "Least Privilege" enforcement.
- Cloud-Native Reliability Engineering:
- Deep understanding of multi-cloud reliability patterns, maintaining high availability (HA) during security patching or infrastructure-wide hardening.
- Hardened Kubernetes Orchestration: Advanced experience securing GKE, EKS, and kOps, specifically implementing Pod Security Standards, Network Policies, and Admission Controllers for a "Zero-Trust" posture.
- Threat Modeling:Security Reviews & Threat Modeling at both Design & Implementation scope.
- Supporting Your Well-Being
- Driving Social Impact
- Developing Talent and Fostering Connection + Community