# Staff Site Reliability Engineer, Security - GCP

**Company:** [Okta](https://hotfix.jobs/companies/okta)
**Location:** Bengaluru, India
**Role:** DevOps / SRE
**Experience:** 8+ years
**Skills:** GCP, AWS, Terraform, Chef, Go, Python, Ruby, Kubernetes, GKE, Gce, IAM, Linux, Pki, Splunk, Crowdstrike Falcon
**Posted:** 2026-08-07

> Hardens and operates large-scale GCP and AWS infrastructure, automating security remediation, incident response, IAM, and reliability improvements. The role requires deep cloud security and DevSecOps experience, strong infrastructure-as-code skills, and expertise in Kubernetes, Linux, and security automation.

## Job Description

## Responsibilities
- Lead initiatives to strengthen security posture for critical infrastructure and promote best practices across engineering.
- Respond to production security incidents, perform root cause analysis, and build automated preventions for performance and reliability.
- Identify manual security processes and automate them with custom tooling and CI/CD integrations.
- Develop technical documentation, runbooks, and procedures for a 24x7 online environment.
- Evolve monitoring platforms from simple auditing to active, automated prevention.
- Design and maintain large-scale production IAM policies and secrets-management workflows.
- Implement and maintain Public Key Infrastructure (PKI), ensuring GCE and GKE environments meet strict compliance standards.
- Monitor system health and security telemetry using industry-standard tools.
- Lead phased transitions of security policies from audit/detection mode to blocking/prevention mode without affecting production uptime.

## Requirements
- 8+ years of experience architecting and running complex cloud networking and infrastructure, including 7+ years specializing in DevSecOps or cloud security.
- At least 3+ years of deep, hands-on experience securing GCP, including GKE, GCE, and Shared VPC.
- 10+ years of experience using Terraform and Chef to manage cloud resources and OS hardening.
- Expert proficiency in Go, Python, or Ruby for building security tooling and automated remediation.
- Experience securing containerized workloads, including image scanning, Kubernetes RBAC, and runtime security tools.
- Ability to troubleshoot complex networking, IAM, and performance issues under pressure.
- Strong knowledge of Linux internals, OS hardening, CIS benchmarks, and IP protocols including TLS/SSL, DNSSEC, and BGP.
- Bachelor's degree in Computer Science or equivalent professional experience.

## Nice to Have
- Experience designing unified IAM governance across AWS and GCP, including Workload Identity Federation, Workforce Identity Federation, SAML, OIDC, and automated least-privilege enforcement.
- Deep understanding of multi-cloud reliability patterns and maintaining high availability during security patching or infrastructure hardening.
- Advanced experience securing GKE, EKS, and kOps, including Pod Security Standards, network policies, and admission controllers for zero-trust environments.
- Experience with security reviews and threat modeling at the design and implementation levels.

## Tools and Technologies
- OSQuery
- Splunk
- Chronicle
- Nessus
- Qualys
- CrowdStrike Falcon
- Falco
- gVisor

## Similar jobs

- [Staff Software Engineer, Inference / Compute Infrastructure Engineering](https://hotfix.jobs/jobs/b1b1bdb1-d3f0-47cd-b94b-7781be7399fc) - Together AI - Remote
- [Staff DevSecOps Engineer, Enterprise Technology](https://hotfix.jobs/jobs/85d2a18a-f6f6-4858-a074-0d6b16869dd1) - Okta - Bengaluru, India
- [Staff Software Engineer, Inference / Compute Infrastructure Engineering](https://hotfix.jobs/jobs/cf3c46c0-63dd-4681-b117-16200b400d89) - Together AI - London, United Kingdom
- [Staff Software Engineer](https://hotfix.jobs/jobs/17a92e38-a4f6-4c6b-a6cc-e3bf61bd9955) - Okta - Bengaluru, India
- [Senior/Staff Kubernetes Infrastructure Engineer](https://hotfix.jobs/jobs/5276ef82-8104-4269-8e3f-7f0e02d35c2d) - Fal - Remote - $180k – $250k/yr

**Apply:** https://hotfix.jobs/jobs/7bfe0a0f-e897-4b41-a08d-b794d2e9f21d
**Canonical:** https://hotfix.jobs/jobs/7bfe0a0f-e897-4b41-a08d-b794d2e9f21d