Staff Technical Program Manager, Security Infrastructure Operations

Okta•San Francisco, CA

1d•Hybrid

About The Position

Okta is The World’s Identity Company. We free everyone to safely use any technology, anywhere, on any device or app. Our flexible and neutral products, Okta Platform and Auth0 Platform, provide secure access, authentication, and automation, placing identity at the core of business security and growth. At Okta, we celebrate a variety of perspectives and experiences. We are not looking for someone who checks every single box - we’re looking for lifelong learners and people who can make us better with their unique experiences. Join our team! We’re building a world where Identity belongs to you. We are seeking a highly experienced and strategic Staff Technical Program Manager to lead critical cross-functional initiatives within TDI Security. This role drives execution across vulnerability management, secure SDLC (PDLC), application allow-listing, secrets management, IPSIE controls, and foundational work supporting our Federal and FY27 Top Threat initiatives. This is a Staff-level leadership role where you will anchor large, multi-team programs, establish delivery frameworks, and partner closely with engineering and product leaders to uplift Okta’s security posture. You will bring clarity to ambiguity, create structure for complex efforts, and ensure successful execution across infrastructure, cloud, and application security programs. You will collaborate closely with Engineering, Product, Enterprise Security, Internal Audit, and Federal workstreams to accelerate secure delivery and reduce risk across Okta’s corporate and production environments.

Requirements

7–10+ years of Technical Program Management experience in security, infrastructure, or large-scale engineering environments.
Proven success leading multi-team cross-functional programs in fast-paced or high-growth companies.
Deep understanding of vulnerability management, secure SDLC, secrets management, access control models, and cloud infrastructure architecture.
Ability to lead high-impact programs across multiple engineering domains.
Strong organizational skills with the ability to manage multiple large-scale programs concurrently.
Demonstrated success in implementing program governance, operational frameworks, and long-term planning structures.
Exceptional written and verbal communication skills; ability to present to executives and influence senior stakeholders.
Skilled at navigating ambiguity and driving teams toward clear, aligned outcomes.
Proven ability to build trust across engineering, security, product, and compliance teams.
Comfortable with challenging assumptions, identifying gaps, and driving alignment.
Ability to connect execution with business and security outcomes.
A proactive, structured approach to risk management and decision-making.

Responsibilities

Lead end-to-end delivery of major Security Infrastructure programs, including Vulnerability Management uplift, PDLC implementation, and operational security frameworks.
Own the program roadmap for App Allow Listing program to implement strict application controls
Facilitate the weekly sync, drive dependency management, and ensure milestones remain on track.
Drive Enablement & Change Management for the key programs
Own and unify delivery across all Secrets-related programs, including:
Secrets Rotation
Host biweekly syncs with application owners and manage exceptions.
Track application readiness for secrets rotation and oversee approved exceptions (e.g., Workday, Cornerstone, Greenhouse).
Drive adoption plans for apps requiring additional remediation or timeline extensions.
Secrets Repository
Define and deliver the strategy, requirements, and roadmap for an enterprise-wide secrets repository.
Partner with engineering leaders to define MVP and evaluate tooling options
Lead requirement reviews and solution alignment sessions.
Secrets Audit & Governance
Partner with Internal Audit on findings from the Secrets Management walkthrough.
Drive remediation planning and ensure documentation and controls meet auditability and compliance expectations.
Partner for planning session for the Federal program, scope definition, and staffing needs.
Maintain the Federal Classified workstream Confluence page and structure cross-team planning and alignment.
Lead implementation of IP restrictions for user and service accounts across TDI targeted applications.
Maintain weekly-updated status tracking and proactively remove blockers.
Lead delivery across prioritized FY27 security initiatives:
Enforced Strict Application Control
Always-On VPN
Coordinate cross-team planning, risk management, and alignment with engineering stakeholders.
Lead delivery across prioritized FY27 Federal initiatives
Support platform build and proof of concept (POC)
Drive and coordinate cross-functional requirements
Partner with TDI to provide tools and technologies required to build Okta Federal and support its legal separation from Okta, Inc.
Structure and organize work into clear workstreams to enable execution and tracking
Establish operating rhythms, dashboards, reporting mechanisms, and RAID logs.
Coordinate dependencies and blockers across Product, Engineering, Security, and Audit.
Provide executive-ready updates, planning inputs, and roadmap communications.