Key Responsibilities

1. Privileged Access Management (Okta Privileged Access - OPA)

• Partner with US and India-based PAM teams to support the configuration, deployment, and onboarding of workloads into Okta Privileged Access (OPA).
• Assist with migration from legacy/root-based access models to modern, identity-based privileged access.
• Configure SSH-based access workflows using OPA.
• Troubleshoot onboarding issues across application and infrastructure teams.
• Work cross-functionally with local Bangalore engineering teams and US-based teams.

1. Engineering Enablement & Adoption

• Support engineering teams in adopting OPA for SSH access to core workloads.
• Provide technical guidance and practical instruction on secure access patterns.
• Document onboarding processes and operational standards.
• Assist teams during transition phases from root/shared credentials to centralized privileged access controls.

1. Security Validation & Offensive Security Support

• Work under the direction of the Principal Offensive Security Engineer.
• Validate remediation efforts stemming from red team and offensive security findings.
• Re-test vulnerabilities and confirm remediation effectiveness.
• Provide technical feedback to engineering and platform teams.
• Ensure findings are closed with proper security controls implemented.
• Maintain structured documentation of validation activities.

Required Technical SkillsCore Security & Engineering Foundations

• Strong understanding of:
  • Authentication & Authorization models
  • Privileged Access Management (PAM) concepts
  • SSH, Linux access controls, sudo, and key management
  • Identity-based access controls
  • Network segmentation and secure design principles
• Experience working within security engineering or security operations teams.

Required Technical SkillsCore Security & Engineering Foundations

• Strong understanding of:
  • Authentication & Authorization models
  • Privileged Access Management (PAM) concepts
  • SSH, Linux access controls, sudo, and key management
  • Identity-based access controls
  • Network segmentation and secure design principles
• Experience working within security engineering or security operations teams.

API & Development Skills

• Proficiency in at least one of:
  • Python
  • Go
  • Java
  • Node.js
• Strong understanding of REST APIs and API authentication mechanisms.
• Experience integrating with SaaS platforms via API.
• Ability to write scripts or lightweight tooling to automate onboarding and validation tasks.

Infrastructure & Cloud

• Strong Linux administration fundamentals.
• Experience working with:
  • AWS and/or Azure
  • Linux workload onboarding and server configuration
• Understanding of infrastructure-as-code concepts (Terraform knowledge preferred but not mandatory).

Security Testing & Validation

• Ability to interpret red team findings and technical vulnerability reports.
• Experience validating remediation of:
  • Access control misconfigurations
  • Privilege escalation issues
  • SSH/key mismanagement
  • Identity and authentication weaknesses
• Familiarity with offensive security methodologies is strongly preferred.

Required Experience

• 4–8 years of experience in security engineering, platform engineering, or DevSecOps roles.
• Prior exposure to:
  • Privileged access tools (Okta Privileged Access (preferred), CyberArk, BeyondTrust, etc.)
  • SSH-based access controls in production environments.
• Experience working in global, cross-regional teams.
• Strong communication skills (written and verbal) — ability to work effectively with US-based teams.

Preferred Qualifications

• Experience with Okta or Okta Privileged Access (OPA).
• Exposure to red team operations or offensive security programs.
• Experience supporting enterprise-scale environments.
• Security certifications (a plus):
  • OSCP / OSWE
  • Security+
  • CISSP (Associate acceptable)
  • Cloud security certifications

Candidate Profile We Are Seeking

• A hands-on technical practitioner (not policy/GRC-focused).
• Comfortable working directly with engineers and platform teams.
• Able to troubleshoot, configure, and validate technical controls independently.
• Strong foundational understanding of security engineering principles.
• Detail-oriented and capable of independently validating technical remediation work.
• Collaborative and comfortable operating in a fast-paced enterprise security environment.
• Ability to collaborate across time zones, with at least 3 to 4 hours of overlap with US Pacific working hours.

MSP NOTES:

• Onsite at the Bangalore office
• Initial Assignment Length: 4 months with possibility of extension
• Ability to collaborate across time zones, with at least 3 to 4 hours of overlap with US Pacific working hours.