3 days ago
Base Salary
$216k - $292k/yr
Responsibilities
- Own the Okta platform roadmap, architecture, configuration, integrations, security posture, change management, and operational reliability.
- Design and troubleshoot SSO, SAML, OIDC, OAuth, and SCIM integrations, authentication policies, MFA, session controls, and device-aware access.
- Build identity lifecycle, provisioning, deprovisioning, access review, least-privilege, privileged-access, and application-ownership controls.
- Develop production automation using Python, JavaScript, Okta APIs, Workflows, Terraform, and infrastructure-as-code practices.
- Establish governance and authorization controls for service accounts, API tokens, integrations, AI agents, and MCP access.
- Serve as the final technical escalation point for complex Okta issues and remain accountable for production outcomes.
Requirements
- Expert-level, hands-on ownership of an enterprise Okta environment, including architecture, integrations, lifecycle management, authentication policies, governance, and production troubleshooting.
- Typically 8–10+ years of relevant experience in identity engineering, IT infrastructure, or corporate security, although the posting states there is no fixed years-of-experience minimum.
- Deep understanding of SAML, OIDC, OAuth, SCIM, federation, authentication, and authorization.
- Demonstrated production engineering experience with Python and/or JavaScript, APIs, and Terraform or equivalent infrastructure-as-code tools.
- Experience delivering corporate security controls across SaaS applications, endpoints, device trust, and data protection.
- Ability to define technical roadmaps, lead complex cross-team work, make security decisions, and own production results.
- Experience with HR-driven identity modernization, Workday integrations, directory consolidation, identity governance, privileged access, non-human identity, AI-agent or MCP security, or Okta certifications is useful but not required.
Benefits
- Comprehensive salary and benefits package with medical, dental, and vision coverage.
- Medical plan options through Aetna and Kaiser Permanente, plus HSA or Healthcare FSA options.
- Dental plans through MetLife and vision coverage through Vision Care.
- Generous parental leave, Maven Clinic access, Dependent Care FSA, and One Medical membership for employees and dependents.
- Pre-tax commuter benefits, life insurance, short-term and long-term disability coverage, and a 401(k) with company match.
- Unlimited PTO and voluntary benefits including identity protection, legal coverage, and pet savings programs.
- Global collaboration across Europe, APAC, and North America.
- In-person work at the Union Square office with company-provided lunch daily.
Tech Stack
Categories
About Legora AB
Legora builds an AI-powered collaborative workspace for legal professionals, used by law firms and in-house legal teams to draft, review, and manage matters. It sells enterprise SaaS to senior legal decision-makers, focusing on precision and speed for complex workflows. Founded in 2023 and headquartered in Stockholm, this privately held company serves over 200 global clients and is backed by Accel, Bessemer, ICONIQ, General Catalyst, Benchmark, Redpoint, and Y Combinator.