27 days ago
Base Salary
$194k - $267k/yr
Responsibilities
- Own the end-to-end architecture and delivery of major Agent Gateway capabilities.
- Design secure request routing, credential handling, token exchange, tenant isolation, policy evaluation, and audit logging.
- Build and scale data- and control-plane services for reliable, high-performance agent traffic.
- Track and shape MCP, OAuth token exchange, and agent identity specifications and their reference implementations.
- Use agentic tooling such as Claude Code, custom skills, subagents, and MCP servers in engineering workflows.
- Drive code review, testing standards, incident retrospectives, design documentation, and mentoring.
- Collaborate across product, security, infrastructure, and identity control-plane organizations.
Requirements
- 7+ years of experience building distributed, highly available production backend systems.
- Hands-on production-service development experience in Java and/or Go.
- Strong knowledge of OAuth 2.0, OIDC, and RFC 8693 token exchange, including implementing specification-driven code.
- Experience shipping identity, authorization, or edge-of-network services at scale.
- Experience with operational practices including rollouts, feature flags, observability, and incident response.
- Working fluency with agentic development tools such as Claude Code, MCP servers, and AI-assisted code review.
- Strong technical writing, design-document, communication, and cross-functional collaboration skills.
- Preferred qualifications include production experience with MCP servers, agent frameworks, or LLM-facing gateways; multi-tenant SaaS or enterprise identity-provider experience; and contributions to MCP, OAuth, GNAP, or DCR standards work.
Benefits
- Annual base salary range of $194,000-$267,000 USD for candidates in the San Francisco Bay Area.
- Health, dental, and vision insurance.
- 401(k) and flexible spending account.
- Paid leave including PTO and parental leave.
- Equity and bonus may be available under applicable plans.
- Hybrid work arrangement indicated by the posting.
- Immersive in-person onboarding experience.
- Talent development, well-being support, and social-impact programs.
About Okta
Okta builds cloud-based identity and access management for enterprises and developers, including single sign-on, multi-factor authentication, and lifecycle management. It sells subscription SaaS as the Okta Workforce Identity and Customer Identity Clouds; the latter incorporates Auth0, acquired in 2021. Founded in 2009 and headquartered in San Francisco, Okta is a public company traded on Nasdaq.