Staff Software Engineer, AI-Core (Federal)

Obsidian Security is the leading SaaS security platform, trusted by global enterprises like Snowflake, T-Mobile, and Algolia. We protect 200+ organizations across North America, Europe, the Middle East, Southeast Asia, Australia, and New Zealand, including many of the world’s largest Fortune 1000 and Global 2000 companies. Founded in 2017 and backed by top investors like Greylock, Obsidian was built to close a critical gap: securing SaaS apps where business happens—Microsoft 365, Salesforce, and hundreds more. The company does this by offering a complete SaaS security platform to reduce risk, detect and respond to threats, and prevent breaches at the source. Obsidian was built by leaders who redefined endpoint and identity security at CrowdStrike, Okta, Cylance, and Carbon Black. Now, they’re transforming how SaaS is secured. With AI driving rapid SaaS growth and complexity, agentic AI tools gain privileged access to sensitive data through integrations, creating new risks most security tools miss. Obsidian uniquely detects anomalous OAuth token activity and manages integration risks. Major announcements are on the horizon. Recognizing that SaaS security needs to evolve, Obsidian enables growing organizations to start with a lightweight, prevention-focused browser extension and expand coverage over time. With global momentum, a growing partner ecosystem including SentinelOne, Databricks, and Google Cloud, and a major fundraise ahead, Obsidian is scaling rapidly toward long-term growth and IPO readiness. About the Role - as a Staff Software Engineer at Obsidian, you'll: Own meaningful product and platform work across Obsidian's engineering stack, with scope that extends beyond a single team. This is a generalist role for someone who can move between backend services, data flows, APIs, product features, integrations, and production systems without getting stuck at the boundaries between them, and who can set technical direction that other engineers and teams align to. You'll work on systems that help customers understand activity, risk, and threats across their SaaS environments. Some problems will be well-defined. Others will start as a customer need, a security signal, or a vague product idea that needs technical shape. You should be comfortable turning that ambiguity into an architecture, a multi-team plan, and working software — and comfortable being the person others look to when the technical path forward is unclear. What you'll do * Own features and system architecture from problem definition through production, at a scope spanning multiple teams or the broader platform * Design and build backend services, APIs, data processing workflows, integrations, and product-facing capabilities * Set technical direction and architectural standards that other engineers and teams build against * Work with product managers, designers, security researchers, and engineers to turn customer needs into shipped software * Improve the performance, reliability, scalability, and observability of existing systems, and identify systemic risks before they become incidents * Make practical technical decisions with organization-wide impact and explain the tradeoffs clearly to both technical and non-technical stakeholders * Raise engineering standards through code reviews, design discussions, mentoring senior and mid-level engineers, and documentation * Debug the hardest production issues and drive teams to durable fixes, not just short-term patches * Use AI-powered tools effectively while maintaining high standards for correctness, security, and maintainability What's in It for You * Direct, high-leverage impact on a core security product used by enterprises worldwide * Variety across backend engineering, data pipelines, SaaS integrations, detection systems, cloud infrastructure, and customer-facing workflows * A chance to define the technical approach to current security problems around SaaS, identity, data movement, and AI usage * Strong peers across product, engineering, security research, and go-to-market teams * A fast-moving environment where staff/principal engineers are expected to own ambiguous problems, influence direction across teams, and ship Required Skills & Experience * 8+ years of experience in a software engineering role, with a track record of increasing technical scope and impact * Strong proficiency in one or more modern programming languages such as Python, Go, TypeScript, or SQL * Demonstrated experience designing and building backend services, APIs, distributed systems, data processing workflows, or production product features at scale * Deep understanding of relational databases such as Postgres, including performance and scaling tradeoffs * Experience with cloud platforms such as AWS or GCP, including cost, reliability, and architecture tradeoffs * Familiarity with containerization and orchestration technologies such as Docker and Kubernetes * Experience with event-driven or streaming systems such as Kafka, Redis, or similar technologies * Strong ability to reason about system design, performance, reliability, security, and operational tradeoffs across multiple systems and teams * Experience setting technical direction and leading complex, cross-team technical initiatives without needing formal authority * Strong communication skills in code reviews, design discussions, and cross-functional planning, including with senior stakeholders Desirable Experience * Experience with observability and monitoring tools such as Grafana, Prometheus, or similar platforms * Experience with CI/CD pipelines and deployment tooling such as GitLab CI/CD * Deep exposure to large-scale distributed systems, high-throughput ingestion, or data pipeline architecture * Background or interest in security, SaaS platforms, identity, threat detection, or data protection * Experience working across multiple engineering teams or across geographically distributed teams * Experience mentoring engineers, including senior engineers, and helping teams improve technical practices * Experience evaluating AI-generated code and using AI tools as part of an engineering workflow AI Skills & AI-Native Engineering Expectations As an AI-forward engineering organization, we expect staff/principal engineers to effectively leverage AI tools and understand foundational AI concepts to improve development efficiency, build AI-ready systems, and set the standard for how their teams use AI tools responsibly. AI Engineering Capabilities * Leverage AI tools effectively to improve development efficiency and build AI-ready systems * Critically evaluate, test, and refine AI-generated outputs before they reach production * Understand core AI/ML concepts such as LLMs, embeddings, vector databases, inference, and evaluation * Experience integrating AI/ML APIs or building systems that support AI-driven product workflows * Ensure quality, observability, reliability, security, and performance in systems that use or support AI capabilities * Help establish org-wide norms and best practices for AI-assisted engineering Employee Benefits Our competitive benefits packages are designed to support our employees' well-being, both at work and at home.  Our US based employees enjoy: * Competitive compensation with equity and 401k * Comprehensive healthcare with dental and vision coverage * Flexible paid time off and paid holiday time off  * 12 weeks of new parent or family leave * Personal and professional development resources For more details on our US benefits, or for information on our international benefits, please see here [https://app.rippling.com/benefits/preview/76xr7qaxl1xvkd3z]. Pay Transparancy Please note that the base pay range is a guideline and for candidates who receive an offer, the base pay will vary based on factors such as work location, as well as the knowledge, skills and experience of the candidate. In addition to a competitive base salary, this position is eligible for equity awards and may be eligible for sales commission or incentive compensation based on the role or function within the company. At Obsidian, we are proud to be an equal-opportunity employer. We value diversity and hire for talent, passion, and compassion. In compliance with federal law, all persons hired will be required to submit satisfactory proof of identity and legal authorization.  If you have a need that requires accommodation, please contact accommodations@obsidiansecurity.com Information collected and processed as part of any job applications you choose to submit is subject to Obsidian’s Applicant Privacy Policy [https://www.obsidiansecurity.com/privacy-policy/]. Base Salary Range $169,000—$192,000 USD

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. THE TEAM We safeguard Okta from threats and vulnerabilities that could disrupt our business or erode our customers’ trust. The Defensive Cyber Engineering organization is responsible for the Security Data Platform, infrastructure, and tooling that enable Okta’s Detection and Response capabilities. The team also manages enterprise security tools and infrastructure that support XDR, DLP, and SSPM capabilities. THE ROLE We are expanding this team to support Okta’s Public Sector roadmap by hiring a Staff Software Engineer in the DC area. You’ll work closely with Security, Business Technology Engineering, and Product teams to implement and manage security solutions, ensuring our core infrastructure applications protect our workforce, endpoints, and corporate data. To deliver on this vision, you will build data and infrastructure platforms by leveraging your software, data, and security engineering skills. You’ll use automation, policy-as-code, and cloud-native technologies to deliver scalable, resilient, and secure solutions. What you bring: * 8+ years of strong coding and scripting experience, with a focus on building automation and custom tooling for security engineering teams.  * Experience with Python is required; proficiency in other languages (e.g., Bash, PowerShell, Go) is a plus. * Experience developing and maintaining ETL/ELT pipelines for onboarding security data into Okta’s security data lake. * Experience working with security teams to integrate log sources and ensure seamless data ingestion. * Ability to build and maintain scalable, fault-tolerant data pipelines to process security event data. * Proven track record of automating security controls and workflows using a cloud-first approach. * Experience with Terraform and other infrastructure-as-code tools to orchestrate security infrastructure. * Familiarity with CI/CD pipelines for security automation and drift management. * Strong communication skills, with the ability to collaborate with technical staff, support teams, executive leadership, and external vendors. * 2+ years of experience building engineering solutions within highly regulated environments such as FedRAMP High, IL4, IL5, and/or IL6 is a plus. * Current or previous Secret, Top Secret (TS), or Top Secret/Sensitive Compartmented Information (TS/SCI) clearance. What you’ll be doing * Serve as a security subject matter expert (SME) for solution engineering and architecture reviews, preferably in the Detection and Response and/or enterprise security tooling space. * Lead technical efforts to evaluate, design, and implement new enterprise security systems and feature enhancements. * Build, maintain, and enhance custom automation and cloud infrastructure using Terraform or similar tools to support team workflows and enforce security controls. * Develop integrations with APIs, cloud platforms (AWS, GCP, Azure), and security infrastructure to improve detection, response, and remediation. * Write and maintain scripts and automations, with an emphasis on Python-based solutions, to streamline security operations. * Establish monitoring and alerting for security posture, misconfigurations, and threats across endpoints, SaaS, and cloud workloads. * Proactively identify and remediate security gaps; stay updated on emerging threats, solutions, and tooling across the industry. And extra credit if you have experience in any of the following! * Advanced identity management technologies (MFA, SAML, OAuth, OIDC, WebAuthn) * Deep understanding of Okta's ecosystem, including advanced configuration and integrations * Experience with continuous compliance solutions (e.g., policy-as-code, automated evidence gathering) Additional requirements: * This position requires the ability to access federal environments and/or have access to protected federal data.  As a condition of employment for this position, the successful candidate must be able to submit documentation establishing U.S. Person status (e.g. a U.S. Citizen, National, Lawful Permanent Resident, Refugee, or Asylee. 22 CFR 120.15) upon hire. #LI-HYBRID #LI-SH1 P24527_3348076   Below is the annual base salary range for candidates located in California (excluding San Francisco Bay Area), Colorado, Illinois, New York and Washington. Your actual base salary will depend on factors such as your skills, qualifications, experience, and work location. In addition, Okta offers equity (where applicable), bonus, and benefits, including health, dental and vision insurance, 401(k), flexible spending account, and paid leave (including PTO and parental leave) in accordance with our applicable plans and policies. To learn more about our Total Rewards program please visit: https://rewards.okta.com/us.    The annual base salary range for this position for candidates located in California (excluding San Francisco Bay Area), Colorado, Illinois, New York, and Washington is between: $161,000—$221,000 USD The Okta Experience * Supporting Your Well-Being  * Driving Social Impact  * Developing Talent and Fostering Connection + Community We are intentional about connection. Our global community, spanning over 20 offices worldwide, is united by a drive to innovate. Your journey begins with an immersive, in-person onboarding experience designed to accelerate your impact and connect you to our mission and team from day one. Okta is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, marital status, age, physical or mental disability, or status as a protected veteran. We also consider for employment qualified applicants with arrest and convictions records, consistent with applicable laws. If reasonable accommodation is needed to complete any part of the job application, interview process, or onboarding please use this Form to request an accommodation. Notice for New York City Applicants & Employees: Okta may use Automated Employment Decision Tools (AEDT), as defined by New York City Local Law 144, that use artificial intelligence, machine learning, or other automated processes to assist in our recruitment and hiring process. In accordance with NYC Local Law 144, if you are an applicant or employee residing in New York City, please click here to view our full NYC AEDT Notice.