Staff Identity Engineer

4 hours ago

Chicago, IL, USA +2 moreStaff+

H1B Sponsor

Base Salary

$161k - $221k/yr

Responsibilities

Own the lifecycle, policy design, adaptive MFA, and federation of enterprise Okta tenants.
Architect and enforce cloud IAM guardrails across AWS, GCP, and Azure.
Build API-based and automation-first pipelines for identity workflows.
Lead Customer Zero adoption of Okta capabilities and provide technical feedback to product engineering teams.
Mentor engineers, lead IAM design reviews, and establish technical standards across teams.
Govern AI agents, machine identities, and service-to-service authentication.
Partner with Security, Audit, and Compliance teams to align identity controls with SOC 2, ISO 27001, and FedRAMP.
Drive session lifecycle security, token management, continuous access evaluations, and operational KPIs.

At least 4 years of hands-on experience designing, implementing, and maintaining enterprise-scale IAM solutions.
Deep hands-on expertise with enterprise Okta environments, including Okta Identity Engine, Directory Integrations, Advanced Policies, Workflows, and Platform APIs.
Advanced knowledge of OIDC, OAuth 2.0, SAML 2.0, FIDO2, WebAuthn, and Passkeys.
Experience defining identity controls as code with Terraform and Okta Workflows.
Experience designing cloud IAM guardrails across AWS, GCP, and Azure, including machine-to-machine and service-to-service authentication.
Background in session lifecycle security, token management and revocation, and continuous access evaluations such as CAEP and eSSO.
Experience mentoring engineers, leading design reviews, and establishing engineering best practices.
Practical experience building identity controls aligned with SOC 2, ISO 27001, and FedRAMP.
Employee must work on U.S. soil and qualify as a U.S. person under the stated federal definitions.
Occasional travel is required.

Base salary range of $161,000–$221,000 for specified locations, with equity where applicable, bonus, health, dental and vision insurance, 401(k), flexible spending account, and paid leave including PTO and parental leave.
Access to well-being support, social impact programs, talent development, and community-building initiatives.
Immersive in-person onboarding experience; the role is based on U.S. soil and requires occasional travel.

5,001-10,000 employees

Okta secures AI. Okta is The World’s Identity Company. Freeing everyone to safely use any technology—anywhere, on any device or app.