Staff Site Reliability Engineer, Networking w/ active TS/SCI

The Federal SRE Team

We are looking for an experienced Staff Site Reliability Engineer to join Okta's Federal SRE team for the Emerging Products Group (EPG). Our mission is to build highly reliable, scalable, and secure cloud services that our customers can trust. We embrace an automation-first mindset and continuously invest in platform engineering, observability, and operational excellence to enable our engineering teams to move quickly and safely.

The Staff SRE, Classified Opportunity

This role is ideal for an engineer who enjoys solving complex technical challenges at scale, building automation, and improving the reliability of production systems. You will serve as a technical leader within the EPG SRE organization, partnering closely with software engineers, architects, and product teams to design, build, and operate world-class cloud services.

The ideal candidate exemplifies the philosophy of "if you have to do it more than once, automate it" and possesses a strong passion for continuous improvement, operational excellence, and software engineering.

Security Clearance: Active U.S. TS/SCI clearance with Full Scope Poly Compliance Expertise: Proven experience navigating Federal and DoD compliance frameworks, specifically FedRAMP and Impact Level 6 (IL6)

What You’ll Do

• Work with various teams to design and implement scalable, and reliable network solutions
• Maintain a highly available cloud infrastructure edge for the Okta identity platform
• Collect and analyze data to identify root causes for network-specific events
• Automate AWS infrastructure with Terraform
• Evolve the system by introducing changes to improve efficiency, scalability, and velocity

What You’ll Bring

Core Requirements

• Clearance & Citizenship: Active TS/SCI clearance with a full scope poly
• Federal Compliance: Proven experience navigating Federal and DoD compliance frameworks, specifically FedRAMP and Impact Level 6 (IL6), with familiarity in SC2S/C2S
• 8+ years experience in a Cloud Network Engineer role or related
• Demonstrated in-depth understanding of TCP/IP networking stack; (layer 2 through 7). Ability to implement a highly available VPC network, including inter-vpc connectivity. Working knowledge of stateless and stateful firewalls. Familiar with DNS, web-application firewalls, and various load balancing methods available in the cloud.
• Deep knowledge of AWS network concepts such as Transit Gateway, Site-to-Site VPN, and Direct Connect
• In-depth understanding of Load Balancing, DNS and other networking protocols
• Solid understanding and experience with Apache httpd, nginx, Apache Tomcat, or similar
• Ability to troubleshoot network issues using AWS VPC flow logs and Cloudwatch metrics, alongside standard packet captures.
• Experience working with Terraform
• Proficiency in Bash, Python, Golang, or similar is a bonus.
• Experienced with git
• Able to collaborate effectively with multiple stakeholders

Extra Credit if you have the following skills:

• Working knowledge of Palo Alto next-gen virtual firewalls, implementation of firewalls, as well as configuration of security policies, routing, and global protect.
• Experience debugging software using gdb, strace, ltrace, tcpdump, Wireshark, etc.
• Experience working with Docker and Kubernetes

#LI-BB1

#LI-Hybrid

P24510