Okta
Staff DevSecOps Engineer (TS/SCI)
$161K–$221K
Washington, DC +1 · Staff · Full-time · Posted Sep 14, 2026
- Location
- Washington, DC
Washington, District of Columbia, United States - Experience
- 10+ years in a specified security/infrastructure field and 10+ years of coding and scripting; 2+ years in highly regulated environments is a plus.
- Visa sponsorship
- Must be a U.S. person and on U.S. soil; working on a U.S. visa does NOT qualify as a U.S. person.
About the job
Build and operate vulnerability-management automation, data pipelines, and security posture reporting that help Okta identify, route, prioritize, and remediate infrastructure and cloud risks.
What you'll do
- Develop automation for vulnerability scanning, issue tracking, remediation, and patch validation; integrate security tools, APIs, and cloud platforms.
- Build and maintain security posture analytics, reporting, and scalable pipelines for vulnerability data.
- Partner with engineering, SRE, and remediation teams to enforce security standards, improve visibility, and close security gaps.
What they ask for
- 10+ years in Security Engineering, DevSecOps, Infrastructure Security, or SaaS apps in a large corporate environment.
- 10+ years of coding and scripting focused on security automation and custom tooling.
- Active U.S. TS/SCI clearance with Full Scope Poly; must be a U.S. person and on U.S. soil.
- Proven experience with Federal and DoD compliance frameworks, specifically FedRAMP and Impact Level 6 (IL6).
Nice to have
- 2+ years building engineering solutions in highly regulated environments.
- Experience with vulnerability and misconfiguration scanners/reporting tools, or familiarity with CVE, CVSS, EPSS, OWASP, and CISA KEV.
Pay
$161,000 — $221,000 USD (base salary)
Tools
Python, Bash, Go, Terraform, AWS, GCP, Azure, Atlassian Jira
AI focus
Develop agentic automation and, longer term, use AI to simplify security posture management, improve data trust, automate analysis and prioritization, and provide actionable insights.
Model-written summary · the original posting is authoritative