4 hours ago
Responsibilities
- Own the enterprise identity control plane end to end, including authentication and authorization for employees and contractors.
- Design and operate passwordless authentication, passkey enrollment, authenticator assurance tiers, session policies, and per-application conditional access.
- Manage service accounts, API keys, workload identities, and AI-agent credentials with short-lived access, delegation, expiration, and detailed audit trails.
- Manage identity configuration as code and ship changes through pull requests.
- Build first-party lifecycle automation, access governance workflows, provisioning, and integrations across the workforce SaaS stack.
- Set technical direction for identity and contribute to the broader security engineering roadmap.
- Feed identity telemetry and authentication events into detection and response systems and support incident response involving identity.
- Establish secure-by-default standards for SaaS and AI tools at the identity layer.
- Mentor security and IT engineers and build reusable automation and guardrails.
Requirements
- Deep hands-on Okta engineering experience, including enterprise-scale workforce identity platforms, automation, and API-driven integrations.
- Experience shipping an enterprise-scale Okta passkey rollout and understanding WebAuthn and FIDO2 adoption challenges.
- Experience managing identity infrastructure as code with Terraform or an equivalent IaC tool and using pull-request-based change workflows.
- Strong software engineering ability in Python, Go, or TypeScript for first-party tooling and API-driven automation.
- Experience with SSO, SAML, OIDC, SCIM provisioning, conditional access, and least-privilege practices at scale.
- A proven track record building agentic systems and applying AI and automation to eliminate manual work.
- Ability to set technical direction, define roadmaps, operate autonomously, and execute in ambiguous environments.
- Preferred experience with Google Workspace administration and automation, including Admin SDK, directory sync, and DLP.
- Preferred experience connecting device trust or posture signals to access decisions and using identity-aware proxy patterns.
- Preferred SOC 2 or SOX access-control evidence experience.
- Contributions to open-source identity tooling or the Okta Terraform provider ecosystem are a plus.
Benefits
- The role is based in a talent hub with an in-office culture and a stated requirement to be onsite 5 days a week, with Monday, Tuesday, Thursday, and Friday specifically listed.
- Applicants may include a GitHub profile or project links in the Websites section.
Tech Stack
Categories
About Opendoor
Opendoor builds a digital platform for buying and selling homes, offering instant cash offers to sellers and self-serve tools for buyers to tour and purchase. The company makes money by purchasing homes, reselling them, and providing related real estate services. Founded in 2014 and headquartered in San Francisco, Opendoor is a public company traded on NASDAQ (OPEN) and operates across many U.S. housing markets.