Technical Program Manager, Security Infrastructure Operations
Listed on 2026-01-15
-
IT/Tech
Cybersecurity, Systems Engineer
Staff Technical Program Manager, Security Infrastructure Operations
Join to apply for the Staff Technical Program Manager, Security Infrastructure Operations role at Okta for Developers
Okta is The World’s Identity Company. We free everyone to safely use any technology, anywhere, on any device or app. Our flexible and neutral products, Okta Platform and Auth0 Platform, provide secure access, authentication, and automation, placing identity at the core of business security and growth.
At Okta, we celebrate a variety of perspectives and experiences. We are not looking for someone who checks every single box – we’re looking for lifelong learners and people who can make us better with their unique experiences. Join our team! We’re building a world where Identity belongs to you.
We are seeking a highly experienced and strategic Staff Technical Program Manager to lead critical cross‑functional initiatives within TDI Security. This role drives execution across vulnerability management, secure SDLC (PDLC), application allow‑listing, secrets management, IPSIE controls, and foundational work supporting our Federal and FY27 Top Threat initiatives.
This is a Staff‑level leadership role where you will anchor large, multi‑team programs, establish delivery frameworks, and partner closely with engineering and product leaders to uplift Okta’s security posture. You will bring clarity to ambiguity, create structure for complex efforts, and ensure successful execution across infrastructure, cloud, and application security programs.
You will collaborate closely with Engineering, Product, Enterprise Security, Internal Audit, and Federal work streams to accelerate secure delivery and reduce risk across Okta’s corporate and production environments.
What You’ll Be Doing Program Leadership:Security Infrastructure
- Lead end‑to‑end delivery of major Security Infrastructure programs, including Vulnerability Management uplift, PDLC implementation, and operational security frameworks.
- Own the program roadmap for App Allow Listing program to implement strict application controls.
- Facilitate the weekly sync, drive dependency management, and ensure milestones remain on track.
- Drive Enablement & Change Management for the key programs.
Secrets Management Programs (Rotation, Repository, Audit) Own And Unify Delivery Across All Secrets‑related Programs, Including Secrets Rotation
- Host bi‑weekly syncs with application owners and manage exceptions.
- Track application readiness for secrets rotation and oversee approved exceptions (e.g., Workday, Cornerstone, Greenhouse).
- Drive adoption plans for apps requiring additional remediation or timeline extensions.
- Define and deliver the strategy, requirements, and roadmap for an enterprise‑wide secrets repository.
- Partner with engineering leaders to define MVP and evaluate tooling options.
- Lead requirement reviews and solution alignment sessions.
- Partner with Internal Audit on findings from the Secrets Management walkthrough.
- Drive remediation planning and ensure documentation and controls meet auditability and compliance expectations.
- Partner for planning session for the Federal program, scope definition, and staffing needs.
- Maintain the Federal Classified workstream Confluence page and structure cross‑team planning and alignment.
- Lead implementation of IP restrictions for user and service accounts across TDI targeted applications.
- Maintain weekly‑updated status tracking and proactively remove blockers.
- Enforced Strict Application Control.
- Always‑On VPN.
- Coordinate cross‑team planning, risk management, and alignment with engineering stakeholders.
- Lead delivery across prioritized FY27 Federal initiatives.
- Support platform build and proof of concept (POC).
- Drive and coordinate cross‑functional requirements.
- Partner with TDI to provide tools and technologies required to build Okta Federal and support its legal separation from Okta, Inc.
- Structure and organize work into clear work streams to enable execution and…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).