11 hours ago
Toronto, CanadaStaff+
Responsibilities
- Own the identity control plane for employee and contractor authentication and authorization.
- Design and operate passwordless authentication, authenticator assurance tiers, session policies, conditional access, and per-application authentication rules.
- Manage non-human identities, including service accounts, API keys, workload identities, and AI-agent credentials.
- Manage identity configuration as code through Terraform or equivalent infrastructure-as-code tooling and pull-request workflows.
- Build first-party tooling for lifecycle automation, access governance, provisioning, and integrations across workforce SaaS platforms.
- Own the technical direction for identity and contribute to the broader security engineering roadmap.
- Feed identity telemetry and authentication events into detection and response systems and support incident response.
- Establish secure-by-default standards for SaaS and AI tools and mentor security and IT engineers on identity engineering patterns.
Requirements
- Proven track record building agentic systems and using AI and automation to eliminate manual work.
- Experience designing, building, and operating an enterprise-scale workforce identity platform.
- Deep hands-on Okta engineering expertise, including automation and API-driven integrations.
- Experience shipping an enterprise-scale Okta passkey rollout and applying WebAuthn and FIDO2 in real-world deployments.
- Experience writing and reviewing Terraform or equivalent infrastructure-as-code for identity systems.
- Strong software engineering ability in Python, Go, or TypeScript for first-party tooling and API-driven automation.
- Experience with SSO, SAML, OIDC, SCIM provisioning, conditional access, and least privilege across employees and contractors.
- High autonomy, roadmap-setting ability, business-enablement orientation, humility, and curiosity.
- Google Workspace administration and automation experience, including Admin SDK, directory sync, and DLP, is preferred.
- Experience connecting device trust or posture signals to access decisions, identity-aware proxy patterns, SOC 2 or SOX access-control evidence, or contributions to identity tooling and the Okta Terraform provider ecosystem is preferred.
Benefits
- The role is based in one of Opendoor’s offices and requires in-person work four days per week.
- Employees work in an in-office culture focused on building alongside teammates.
Tech Stack
Categories
About Opendoor
Opendoor builds a digital platform for buying and selling homes, offering instant cash offers to sellers and self-serve tools for buyers to tour and purchase. The company makes money by purchasing homes, reselling them, and providing related real estate services. Founded in 2014 and headquartered in San Francisco, Opendoor is a public company traded on NASDAQ (OPEN) and operates across many U.S. housing markets.