Senior Software Engineer in Test

The Identity Security Pillar

Our Identity Security organization keeps Okta customers safe by detecting, preventing, and responding to identity-based attacks in real time, at the scale of the world's largest Identity Cloud. We have multiple open positions across teams that own:

• Identity Threat Protection (ITP) and Identity Security Posture Management (ISPM), including the integration of Permiso's non-human identity and cloud entitlement risk detection into Okta's threat detection stack
• Essential Security, the core threat detection and protection capabilities every Okta customer relies on, including Threat Insight, the Orbit detection engine, enriched proxy/anonymizer intelligence, breached-credential detection (SpyCloud), Attack Protection, and Adaptive OIE

You'll work shoulder-to-shoulder with engineers who care deeply about shipping high-quality, resilient detection systems that hold up under real-world attack traffic and that customers can trust to keep their organizations safe.

Senior Software Engineer in Test - Identity Security (Multiple Positions)

We seek experienced Senior Software Engineers in Test to join our Identity Security engineering teams. You'll own test strategy and automation for real-time detection pipelines, risk signal correlation, and third-party integrations, and ensure new capabilities ship with zero-debt quality across every new cell and platform upgrade. Team placement will be based on experience and business needs.

Job Duties and Responsibilities:

• Review requirements and design specs to develop test plans and test cases for detection, protection, and posture management features
• Own end-to-end test coverage for complex signal and product integrations, including data ingestion, risk signal correlation, and detection pipelines (e.g., ITP-Permiso integration)
• Automate API, end-to-end, and reliability/scale tests for real-time detection pipelines (Kafka → KDA → DynamoDB & BigTable)
• Simulate real-world attack vectors, generate synthetic load, and benchmark latency for detection pipelines
• Validate new cell rollouts across OIE orgs (e.g., Orbit enforcement, Threat Insight detection, ITP/ISPM features, data-lake IP allowlists)
• Own test support for platform-wide initiatives (e.g., Monolith Spring library upgrades) affecting Identity Security surfaces
• Triage and drive resolution of P0 defects, working cross-functionally with product engineering and integrated partner teams
• Continuously improve automated regression coverage, in partnership with development teams
• Review application code, identify bugs and other areas of weakness, and architect tools for future coverage
• Own release sign-off and respond to production issues, P0/P1 alerts, and customer issues during on-call rotation
• Be a strong customer advocate with a strong quality DNA

Requirements:

• Minimum of a Bachelor's degree in software engineering (or related)
• 4+ years of SDET experience, with a deep focus on enterprise SaaS backend distributed systems, REST APIs, and asynchronous data pipelines
• Experience in test engineering for enterprise-level software, ideally in the identity or security domain
• Strong programming proficiency in Java or Python (TypeScript a plus)
• Familiarity with automation and observability tools like Playwright, Selenium, TestCafe, API (Rest Assured, Karate, etc.), Postman, JMeter, Runscope, Splunk, Grafana, and AWS toolset
• Hands-on experience testing event-driven or streaming platforms (e.g., Apache Kafka, Kinesis, KDA) and distributed databases/caches (e.g., DynamoDB, Redis, BigTable)
• Experience with automation and testing of complex signal and product integrations
• Expertise in test planning and cross-team collaborative efforts, including across integrated third-party or acquired tech stacks
• Experience with continuous integration/continuous deployment (CI/CD) practices
• Experience working with distributed systems at large scale
• Able to write and review designs and code with other team members
• Able to deliver well-designed, high-quality code on time

Nice to have:

• Experience with threat detection, fraud, or attack/bot mitigation systems
• Experience with cloud security posture management (CSPM) or identity security posture management (ISPM) concepts
• Familiarity with non-human identity or entitlement risk models
• Familiarity with third-party threat-intel integrations (e.g., breached credential feeds)
• Experience integrating an acquired company's tech stack into an existing platform
• Good understanding of IAM solutions along with SAML/OIDC protocols
• Experience with AI-native Software Development Life Cycle (SDLC) standards and practices