2 months ago
Base Salary
$161k - $221k/yr
Responsibilities
- Own the lifecycle, policy design, adaptive MFA, and federation of enterprise Okta tenants.
- Architect and enforce cloud IAM guardrails across AWS, GCP, and Azure.
- Build API-based and automation-first pipelines for identity workflows.
- Lead Customer Zero adoption of Okta capabilities and provide technical feedback to product engineering teams.
- Mentor engineers, lead IAM design reviews, and establish technical standards across teams.
- Govern AI agents, machine identities, and service-to-service authentication.
- Partner with Security, Audit, and Compliance teams to align identity controls with SOC 2, ISO 27001, and FedRAMP.
- Drive session lifecycle security, token management, continuous access evaluations, and operational KPIs.
Requirements
- At least 4 years of hands-on experience designing, implementing, and maintaining enterprise-scale IAM solutions.
- Deep hands-on expertise with enterprise Okta environments, including Okta Identity Engine, Directory Integrations, Advanced Policies, Workflows, and Platform APIs.
- Advanced knowledge of OIDC, OAuth 2.0, SAML 2.0, FIDO2, WebAuthn, and Passkeys.
- Experience defining identity controls as code with Terraform and Okta Workflows.
- Experience designing cloud IAM guardrails across AWS, GCP, and Azure, including machine-to-machine and service-to-service authentication.
- Background in session lifecycle security, token management and revocation, and continuous access evaluations such as CAEP and eSSO.
- Experience mentoring engineers, leading design reviews, and establishing engineering best practices.
- Practical experience building identity controls aligned with SOC 2, ISO 27001, and FedRAMP.
- Employee must work on U.S. soil and qualify as a U.S. person under the stated federal definitions.
- Occasional travel is required.
Benefits
- Base salary range of $161,000–$221,000 for specified locations, with equity where applicable, bonus, health, dental and vision insurance, 401(k), flexible spending account, and paid leave including PTO and parental leave.
- Access to well-being support, social impact programs, talent development, and community-building initiatives.
- Immersive in-person onboarding experience; the role is based on U.S. soil and requires occasional travel.
Tech Stack
Categories
About Okta
Okta builds cloud-based identity and access management for enterprises and developers, including single sign-on, multi-factor authentication, and lifecycle management. It sells subscription SaaS as the Okta Workforce Identity and Customer Identity Clouds; the latter incorporates Auth0, acquired in 2021. Founded in 2009 and headquartered in San Francisco, Okta is a public company traded on Nasdaq.