Staff Security Engineer - Federal

We need to output HTML fragment with sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. We must remove boilerplate, navigation, EEO, etc. Keep substantive info. Let's parse the posting. First paragraph: "Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk." That's generic fluff; maybe part of "About the role"? Could be considered about the role. We'll include as prose under About the role. Next: "The TeamWe safeguard Okta from threats and vulnerabilities that could disrupt our business or erode our customers’ trust. The Defensive Cyber Engineering organization is responsible for the Security Data Platform, infrastructure, and tooling that enable Okta’s Detection and Response capabilities. The team also manages enterprise security tools and infrastructure that support XDR, DLP, and SSPM capabilities." That's about the team; could be part of About the role or separate? We'll include under About the role. Next: "The RoleWe are expanding this team to support Okta’s Public Sector roadmap by hiring a Staff Software Engineer in the DC area. You’ll work closely with Security, Business Technology Engineering, and Product teams to implement and manage security solutions, ensuring our core infrastructure applications protect our workforce, endpoints, and corporate data." That's role description. Next: "To deliver on this vision, you will build data and infrastructure platforms by leveraging your software, data, and security engineering skills. You’ll use automation, policy-as-code, and cloud-native technologies to deliver scalable, resilient, and secure solutions." That's responsibilities. Next: "What you bring:" then bullet list of requirements. Let's extract: - 8+ years of strong coding and scripting experience, with a focus on building automation and custom tooling for security engineering teams. - Experience with Python is required; proficiency in other languages (e.g., Bash, PowerShell, Go) is a plus. - Experience developing and maintaining ETL/ELT pipelines for onboarding security data into Okta’s security data lake. - Experience working with security teams to integrate log sources and ensure seamless data ingestion. - Ability to build and maintain scalable, fault-tolerant data pipelines to process security event data. - Proven track record of automating security controls and workflows using a cloud-first approach. - Experience with Terraform and other infrastructure-as-code tools to orchestrate security infrastructure. - Familiarity with CI/CD pipelines for security automation and drift management. - Strong communication skills, with the ability to collaborate with technical staff, support teams, executive leadership, and external vendors. - 2+ years of experience building engineering solutions within highly regulated environments such as FedRAMP High, IL4, IL5, and/or IL6 is a plus. - Current or previous Secret, Top Secret (TS), or Top Secret/Sensitive Compartmented Information (TS/SCI) clearance. Then "What you’ll be doing" list: - Serve as a security subject matter expert (SME) for solution engineering and architecture reviews, preferably in the Detection and Response and/or enterprise security tooling space. - Lead technical efforts to evaluate, design, and implement new enterprise security systems and feature enhancements. - Build, maintain, and enhance custom automation and cloud infrastructure using Terraform or similar tools to support team workflows and enforce security controls. - Develop integrations with APIs, cloud platforms (AWS, GCP, Azure), and security infrastructure to improve detection, response, and remediation. - Write and maintain scripts and automations, with an emphasis on Python-based solutions, to streamline security operations. - Establish monitoring and alerting for security posture, misconfigurations, and threats across endpoints, SaaS, and cloud workloads. - Proactively identify and remediate security gaps; stay updated on emerging threats, solutions, and tooling across the industry. Then "And extra credit if you have experience in any of the following!" list: - Advanced identity management technologies (MFA, SAML, OAuth, OIDC, WebAuthn) - Deep understanding of Okta's ecosystem, including advanced configuration and integrations - Experience with continuous compliance solutions (e.g., policy-as-code, automated evidence gathering) Then "Additional requirements: Security Requirement: Must be able to obtain and maintain a U.S. security clearance (Secret or Top Secret) to the extent required by U.S. Government contracts. The selected candidate may be subject to drug testing to the extent required by U.S. Government contracts." Then "P24527_3348076 Below is the annual base salary range for candidates located in California (excluding San Francisco Bay Area), Colorado, Illinois, New York and Washington. Your actual base salary will depend on factors such as your skills, qualifications, experience, and work location. In addition, Okta offers equity (where applicable), bonus, and benefits, including health, dental and vision insurance, 401(k), flexible spending account, and paid leave (including PTO and parental leave) in accordance with our applicable plans and policies. To learn more about our Total Rewards program please visit: https://rewards.okta.com/us. The annual base salary range for this position for candidates located in California (excluding San Francisco Bay Area), Colorado, Illinois, New York, and Washington is between:: $161,000 USD - $221,000 USD" Then "The Okta ExperienceSupporting Your Well-Being Driving Social Impact Developing Talent and Fostering Connection + CommunityWe are intentional about connection. Our global community, spanning over 20 offices worldwide, is united by a drive to innovate. Your journey begins with an immersive, in-person onboarding experience designed to accelerate your impact and connect you to our mission and team from day one." Then EEO boilerplate etc. Remove. We need sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We have content for About the role (team description, mission). Responsibilities (what you'll be doing). Requirements (what you bring). Qualifications maybe overlapping with requirements? Could separate: Requirements = mandatory (8+ years, Python, etc). Qualifications = plus items (regulated experience, clearance). Skills = maybe languages, tools. Benefits = health, dental, vision, 401k, FSA, paid leave. Pay = salary range. Schedule not mentioned -> omit. We must not create sections with placeholder text. So include only those with real content. Let's craft HTML:

About the role

... combine mission, team, role description.

Responsibilities

• ...

Requirements

• ...

Qualifications

• ...

(plus items)

Skills

• ...

(maybe list Python, Bash, PowerShell, Go, Terraform, CI/CD, etc.)

Benefits

• health, dental and vision insurance
• 401(k)
• flexible spending account
• paid leave (including PTO and parental leave)

Pay

The annual base salary range for this position for candidates located in California (excluding San Francisco Bay Area), Colorado, Illinois, New York, and Washington is between $161,000 USD and $221,000 USD.

We need to ensure we don't repeat job title as heading. Good. We must not include navigation/legal/EEO etc. We need to preserve all substantive info; not invent. Let's extract precise sentences. About the role: combine: "Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk." "The TeamWe safeguard Okta from threats and vulnerabilities that could disrupt our business or erode our customers’ trust. The Defensive Cyber Engineering organization is responsible for the Security Data Platform, infrastructure, and tooling that enable Okta’s Detection and Response capabilities. The team also manages enterprise security tools and infrastructure that support XDR, DLP, and SSPM capabilities." "The RoleWe are expanding this team to support Okta’s Public Sector roadmap by hiring a Staff Software Engineer in the DC area. You’ll work closely with Security, Business Technology Engineering, and Product teams to implement and manage security solutions, ensuring our core infrastructure applications protect our workforce, endpoints, and corporate data." We can merge into a paragraph. Responsibilities list from "What you’ll be doing": - Serve as a security subject matter expert (SME) for solution engineering and architecture reviews, preferably in the Detection and Response and/or enterprise security tooling space. - Lead technical efforts to evaluate, design, and implement new enterprise security systems and feature enhancements. - Build, maintain, and enhance custom automation and cloud infrastructure using Terraform or similar tools to support team workflows and enforce security controls. - Develop integrations with APIs, cloud platforms (AWS, GCP, Azure), and security infrastructure to improve detection, response, and remediation. - Write and maintain scripts and automations, with an emphasis on Python-based solutions, to streamline security operations. - Establish monitoring and alerting for security posture, misconfigurations, and threats across endpoints, SaaS, and cloud workloads. - Proactively identify and remediate security gaps; stay updated on emerging threats, solutions, and tooling across the industry. Requirements list from "What you bring:" (mandatory): - 8+ years of strong coding and scripting experience, with a focus on building automation and custom tooling for security engineering teams. - Experience with Python is required; proficiency in other languages (e.g., Bash, PowerShell, Go) is a plus. - Experience developing and maintaining ETL/ELT pipelines for onboarding security data into Okta’s security data lake. - Experience working with security teams to integrate log sources and ensure seamless data ingestion. - Ability to build and maintain scalable, fault-tolerant data pipelines to process security event data. - Proven track record of automating security controls and workflows using a cloud-first approach. - Experience with Terraform and other infrastructure-as-code tools to orchestrate security infrastructure. - Familiarity with CI/CD pipelines for security automation and drift management. - Strong communication skills, with the ability to collaborate with technical staff, support teams, executive leadership, and external vendors. Note: Some items have "is a plus" etc. Those could be considered qualifications or skills. We'll keep them in Requirements but maybe move plus to Qualifications. Qualifications (plus items): - 2+ years of experience building engineering solutions within highly regulated environments such as FedRAMP High, IL4, IL5, and/or IL6 is a plus. - Current or previous Secret, Top Secret (TS), or Top Secret/Sensitive Compartmented Information (TS/SCI) clearance. Also maybe "Advanced identity management technologies (MFA, SAML, OAuth, OIDC, WebAuthn)" etc are extra credit; could be Skills. Skills list: - Advanced identity management technologies (MFA, SAML, OAuth, OIDC, WebAuthn) - Deep understanding of Okta's ecosystem, including advanced configuration and integrations - Experience with continuous compliance solutions (e.g., policy-as-code, automated evidence gathering) - Proficiency in