Security Engineer, Defensive Cyber Engineering

Staff Security Engineer, Defensive Cyber Engineering

Join to apply for the Staff Security Engineer, Defensive Cyber Engineering role at Okta for Developers
. 4 days ago, be among the first 25 applicants.

Okta is The World’s Identity Company. We free everyone to safely use any technology, anywhere, on any device or app. Our flexible and neutral products, Okta Platform and Auth0 Platform, provide secure access, authentication, and automation, placing identity at the core of business security and growth.

At Okta, we celebrate a variety of perspectives and experiences. We’re not looking for someone who checks every single box – we’re looking for lifelong learners and people who can make us better with their unique experiences.

Join our team! We’re building a world where Identity belongs to you.

As a Staff Engineer on the Defensive Cyber Engineering team, you’ll safeguard Okta’s environments. Working closely with Security, Business Technology Engineering, and Product teams, you’ll implement and manage security solutions to protect our workforce, endpoints, and corporate data. A strong desire to make tools and people work together to solve complex security problems is central to this role. You’ll combine enterprise security expertise with hands‑on engineering skills, leveraging automation, policy‑as‑code, and cloud‑native technologies to deliver scalable, resilient, and secure solutions.

Your work will set standards for security best practices across the organization and influence the architecture of business‑critical systems.

• Serve as a security subject‑matter expert (SME) for solution engineering, architecture reviews, security assessments, and vulnerability mitigation.
• Lead technical efforts evaluating, designing, and implementing new enterprise security systems and feature enhancements.
• Build, maintain, and enhance custom automation and cloud infrastructure using Terraform or similar tools to support team workflows and enforcement of security controls.
• Develop integrations with APIs, cloud platforms (AWS, GCP, Azure), and security infrastructure to improve detection, response, and remediation.
• Collaborate with cross‑functional teams to tackle global technology and security challenges.
• Establish monitoring and alerting for security posture, misconfigurations, and threats across endpoints, SaaS, and cloud workloads.
• Proactively identify and remediate security gaps; stay updated on emerging threats, solutions, and tooling across the industry.

• Hands‑on experience with enterprise security tools such as Okta, Crowd Strike, and the Palo Alto suite, covering EDR, CASB, DLP, MDM, SASE, and SSPM capabilities.
• Proven track record automating security controls and workflows using a cloud‑first approach.
• Experience with Terraform and other infrastructure‑as‑code tools to orchestrate security infrastructure.
• Familiarity with CI/CD pipelines for security automation and drift management.
• Strong communication skills across technical staff, support teams, executive leadership, and external vendors.

• Working with advanced identity management technologies (MFA, SAML, OAuth, OIDC, Web Authn).
• Deep understanding of Okta’s ecosystem, including advanced configuration and integrations.
• Experience with continuous compliance solutions (e.g., policy‑as‑code, automated evidence gathering).

Below is the annual salary range for candidates located in Canada. Your actual salary will depend on factors such as your skills, qualifications, and experience. In addition, Okta offers equity (where applicable), bonus, and benefits, including health, dental, and vision insurance, RRSP with a match, healthcare spending, telemedicine, and paid leave (including PTO and parental leave) in accordance with our applicable plans and policies.

To learn more about our Total Rewards program, please visit:

The annual base salary range for this position for candidates located in Canada is between $141,000—$211,000 CAD.

• Amazing Benefits
• Making Social Impact
• Developing Talent and Fostering Connection + Community at Okta

Some roles may require travel to one of our…