Staff Software Engineer | Java and Spring, Access Management

Okta's Access Management team builds the foundation of authentication and authorisation across everything Okta protects: the cloud services and client software that let users log in to devices and use Okta authenticators to reach applications securely. This is a staff level backend role on that team in Bengaluru, in Java and Spring. The work described is solid platform engineering: contributing to technical designs and architectural decisions, building maintainable components with real unit and functional test coverage, code review with a security emphasis, and working across QA, product, support and UX. Stated bar is seven or more years building Java web applications. Good fit if you want backend work where correctness has security consequences rather than cosmetic ones.

Stated requirement is 7+ years of experience building Java based web applications. Team and product: the Okta Access Management Engineering team builds the foundation for authentication and authorisation across Okta protected resources. Its stated mission is enabling customers to reach those resources securely, and it develops both Okta cloud services and the client software that lets users log in to devices and use Okta authenticators to access applications. Responsibilities as published: collaborate across QA, product, support and UX for integration; contribute to technical designs, proposals and architectural decisions following established best practice; develop high quality maintainable software components with comprehensive unit and functional tests; participate in code review, giving feedback and holding the line on coding standards and security best practice; and contribute to technical documentation and knowledge sharing. Location is Bengaluru. Practical advice specific to Okta right now: the company has a very large number of near identical Bengaluru engineering titles open at once, including several other Staff Software Engineer requisitions with different teams behind them. The title alone will not tell you what you are applying to, so read the team paragraph, and if you are applying to more than one, keep track of which requisition is which. This one is Access Management, meaning core authentication and authorisation rather than a peripheral service. Good fit if you have seven or more years of Java and Spring backend experience and want the domain to be security critical infrastructure. Expect interviews to probe correctness, edge cases and threat thinking more than raw throughput, because the failure mode here is a security incident rather than a slow page.