9 days ago
London, United KingdomStaff+
Responsibilities
- Define and maintain canonical agent identity, delegation, audit, and kill-switch reference architectures.
- Own the hardest strategic, regulated, and technically novel customer deployments.
- Review Forward Deployed Engineer architectures, coach senior engineers, and raise technical standards.
- Synthesize customer patterns into product roadmap recommendations and partner with product and engineering leadership.
- Brief CISO, CIO, and Chief AI Officer audiences and represent Okta in external technical and standards discussions.
- Define scalable evaluation and observability practices for authorization latency, scope sprawl, delegation anomalies, audit completeness, and kill-switch verification.
- Turn recurring field work into reusable modules, internal tooling, and enablement.
Requirements
- 10+ years shipping production software with deep distributed-systems and identity experience.
- Expertise with OAuth 2.0, OIDC, SAML, SCIM, RFC 8693 token exchange, act claims, CIMD, DCR, and DPoP.
- Fluency in OWASP Top 10 for Agentic Applications, NIST AI RMF, MITRE ATLAS, MCP, A2A, ISO/IEC 42001, and the EU AI Act, with experience applying them in HIPAA, FedRAMP, and SOC 2 environments.
- Expertise in fine-grained authorization using ReBAC, ABAC, and policy engines such as OPA, Cedar, or OpenFGA.
- Production experience integrating major agent platforms and MCP, plus daily AI-native development.
- A record of setting technical direction across multiple teams or accounts and mentoring senior engineers.
- Strong customer-facing authority across executive, security, and engineering audiences.
- Ability to travel occasionally, up to 35%.
Benefits
- Annual OTE range of £114,000–£172,000 GBP is stated for candidates located in the United Kingdom; OTE includes base salary and incentive compensation.
- Equity may be offered where applicable.
- Comprehensive healthcare coverage and financial benefits, including paid time off and parental leave, are available under applicable plans and policies.
- Remote role with an immersive in-person onboarding experience; Okta has a global community spanning more than 20 offices.
- Equal opportunity employer with reasonable accommodation support during application, interviewing, and onboarding.
Categories
Forward Deployed
About Okta
Okta builds cloud-based identity and access management for enterprises and developers, including single sign-on, multi-factor authentication, and lifecycle management. It sells subscription SaaS as the Okta Workforce Identity and Customer Identity Clouds; the latter incorporates Auth0, acquired in 2021. Founded in 2009 and headquartered in San Francisco, Okta is a public company traded on Nasdaq.