Principal Solution Engineer

Okta

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. THE IDENTITY TEAM The Identity team's mission is to secure the world's identity connections while building the foundational trust layer for the modern enterprise. As organizations successfully adopt phishing-resistant MFA, attackers have shifted their tactics—increasingly deploying Adversary-in-the-Middle (AiTM) phishing kits and info-stealer malware to execute session hijacking via cookie theft. Furthermore, with the explosive rise of autonomous AI workloads, securing human identity is no longer enough; we must now protect and govern a fast-growing sprawl of non-human, agentic workflows. ABOUT THE ROLE As a Principal Identity Engineer at Okta, you will be the cornerstone of our internal IAM team, driving the vision, strategy, and execution of our identity infrastructure. In this role, you will champion our "Customer Zero" philosophy, partnering directly with our product engineering teams to deploy Okta’s newest features, products, and capabilities internally before they ever hit the market. This is a highly autonomous, high-impact role for a technical leader who acts with a fierce sense of ownership and urgency. We are looking for someone who turns action into traction, ruthlessly simplifies complex problems, and scales solutions. You will not only raise your own bar but will actively pull the rest of the team up with you, serving as a mentor and strategic visionary. Working in close partnership with product, security, and engineering teams, you will influence the future of the platform by validating emerging capabilities, driving innovation, and ensuring the organization is ready to adopt new technologies—including AI-powered services and intelligent agents. As a trusted technical leader, you will mentor engineers, influence architectural decisions, and help determine what’s next for the platform. RESPONSIBILITIES * Act as the primary bridge between internal stakeholders, IAM and Okta’s core Product teams. You will ensure Okta is the first to deploy its own cutting-edge capabilities, providing world-class, rigorous feedback to mature products and catch bugs before they reach global customers. * Serve as a foundational pillar and mentor for the IAM engineering team, fostering a culture of high performance, continuous learning, and technical excellence. * Embody the philosophy of "Move fast, simplify, and repeat." You will identify systemic inefficiencies, automate legacy processes, and champion agile execution. * Take initiative to identify what is needed next and lead the organization toward it. * Partner daily with cross-functional stakeholders to push the boundaries of identity security, modern authentication, and governance. * Act as both the architect and the technical implementer for key strategic initiatives, rolling up your sleeves to implement, guide, and validate critical deployments. * Regularly deliver clear, data-driven leadership updates, translating complex technical milestones and risks into strategic insights for Okta’s executive team. * Establish, track, and report on key performance metrics and KPIs to prove the health, security, and maturity of our IAM ecosystem. * Facilitate design strategy and successful execution of playbook adoption, planning, and intake processes. * Drive the secure adoption of AI technologies by designing, deploying, and governing AI agents and AI-enabled services within the enterprise. TECHNICAL REQUIREMENTS & QUALIFICATIONS To be successful in this role, you should have deep, hands-on architectural experience across the modern identity and cloud infrastructure lifecycle. We are looking for a practitioner who understands both theory and real-world implementation. * 10+ years experience implementing and/or supporting enterprise IAM solutions * Expertise with industry IAM concepts and best practices, particularly relating to SSO, MFA, IGA, and PAM * Deep expertise in modern authentication protocols (OIDC, OAuth 2.0, SAML 2.0) and advanced multi-factor authentication paradigms, including FIDO2/WebAuthn, passkeys, and phishing-resistant MFA. * Comprehensive understanding of secure session lifetimes, token binding, token revocation strategies, and continuous access evaluation to mitigate session hijacking risks. * Proven experience designing and securing machine-to-machine (M2M) communication and cloud-native service-to-service authentication. * Deep knowledge of enterprise secrets management architectures (e.g. Okta Privileged Access) ensuring secure storage, dynamic rotation, and strict access controls. * Advanced proficiency using IaC tools, specifically Okta Workflows and Terraform, to manage identity configuration, access policies, and cloud infrastructure as code. * Strong background in integrating IAM configuration and testing into modern CI/CD pipelines (e.g., GitHub Actions, GitLab CI) to ensure safe, automated, and repeatable deployments. * Experience leading and developing other engineers * Leads by a automation first mindset * Occasional travel as required #P5614_3488197 #LI - hybrid The Okta Experience * Supporting Your Well-Being  * Driving Social Impact  * Developing Talent and Fostering Connection + Community We are intentional about connection. Our global community, spanning over 20 offices worldwide, is united by a drive to innovate. Your journey begins with an immersive, in-person onboarding experience designed to accelerate your impact and connect you to our mission and team from day one. Okta is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, marital status, age, physical or mental disability, or status as a protected veteran. We also consider for employment qualified applicants with arrest and convictions records, consistent with applicable laws. If reasonable accommodation is needed to complete any part of the job application, interview process, or onboarding please use this Form to request an accommodation. Notice for New York City Applicants & Employees: Okta may use Automated Employment Decision Tools (AEDT), as defined by New York City Local Law 144, that use artificial intelligence, machine learning, or other automated processes to assist in our recruitment and hiring process. In accordance with NYC Local Law 144, if you are an applicant or employee residing in New York City, please click here to view our full NYC AEDT Notice.

Okta

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. THE OPPORTUNITY As organizations successfully adopt phishing-resistant MFA, attackers have shifted their tactics—increasingly deploying Adversary-in-the-Middle (AiTM) phishing kits and info-stealer malware to execute session hijacking via cookie theft. Furthermore, with the explosive rise of autonomous AI workloads, securing human identity is no longer enough; we must now protect and govern a fast-growing sprawl of non-human, agentic workflows. We are looking for a highly mature, technically elite, and customer-obsessed Identity Solutions Architect to drive the technical execution of our Identity Security & Agentic Identity portfolio. In this role, you will be a cornerstone of the "Okta on Okta" team, acting as Customer Zero. Reporting directly to the VP of IAM, you will work hand-in-hand with our Principal Product Managers. While the PM shapes the portfolio strategy, you will own the technical architecture, internal deployment blueprints, and the public stage. You will shepherd cutting-edge features from Alpha through Early Availability (EA)—guaranteeing we are our own first and best customer before these solutions scale to the rest of the world. KEY PORTFOLIO FOCUS AREAS As the Identity Solutions Architect, you will architect the technical blueprints and deployment strategies for Okta’s premier identity security offerings across both our workforce and developer platforms: * AI Agent & Agentic Identity Security: Architecting how Okta governs non-human, autonomous AI workloads across O4AA (Okta for AI Agents) and A4AA (Auth0 for AI Agents), defining secure authentication and authorization patterns. * Next-Gen Guardrails: Designing token exchange patterns, security gateways, and implementing the Model Context Protocol (MCP) to secure agent-to-data interactions. * Hardware-Bound Session Security: Designing Okta’s defense against session cookie thievery by leveraging cryptographically hardware-bound tokens (Okta DBSSO and Chrome DBSC). * Advanced Threat & Posture Management: Deploying Identity Threat Protection (ITP) for continuous risk evaluation and Identity Security Posture Management (ISPM) to eliminate hidden vulnerabilities across human and machine identities. * Identity Governance & Administration (IGA): Designing and enforcing modern access governance, including automated lifecycle management, self-service access request workflows, and continuous access certification using Okta Identity Governance. * Privileged Access Management (PAM): Architecting secure, just-in-time (JIT) access to critical infrastructure, managing secrets, and securing privileged sessions using Okta Privileged Access. WHAT YOU’LL BE DOING (YOUR IMPACT) * Governance & Privileged Access Leadership: Lead the internal Customer Zero deployment of Okta IGA and PAM. You will blueprint workflows for least-privilege access, ensuring robust compliance and security over Okta's most sensitive administrative, server, and infrastructure entitlements. * Customer Zero Lifecycle Execution (Alpha to EA): Act as the lead architect testing and deploying Alpha identity security features within Okta’s internal IAM environment. Author the technical rollout blueprints and provide the core engineering teams with critical feedback. * Anti-Session Hijacking Architecture: Design the internal implementation blueprint for how Okta DBSSO and Chrome DBSC complement one another, creating an ironclad, layered defense that protects corporate endpoints from token and cookie exfiltration. * Open-Source & Community Leadership: Lead the technical effort to open-source the complimentary tools our Customer Zero team builds, transitioning our internal innovations into a massive, thriving community effort with our customers. * Thought Leadership & Personal Brand: Take the microphone. You will help lead a dedicated "how-to" video series and a potential podcast this year, and take the stage at major events to share our internal playbook. * Ecosystem Integration: Define how Okta identity is woven into modern orchestration layers (LangChain/Graph, n8n, AWS AgentCore, Google Vertex ADK) and model providers (Azure Foundry, AWS Bedrock, OpenAI, Anthropic). MASSIVE INDUSTRY COLLABORATION As the technical face of Okta’s Customer Zero team, you will have unique, high-impact opportunities to collaborate closely with strategic engineering and identity infrastructure teams at major enterprise tech companies, leading cloud service providers, and top-tier security vendors. WHAT YOU’LL BRING TO THE ROLE * Professional Maturity & Architecture Expertise: 8+ years of overall IT/software development and technical architecture experience, with 3+ years specifically focused on IAM/Security Architecture. You have a proven track record of securing non-human identities (NHIs) or machine-to-machine infrastructure in production. * Governance & PAM Experience: Demonstrated experience deploying Identity Governance (IGA) and Privileged Access Management (PAM) solutions, including just-in-time (JIT) access, infrastructure security, lifecycle management, and access certification. * Protocol & Threat Literacy: Knowledge of core protocols: OAuth2/OIDC (especially Token Exchange), SAML, mTLS, JWT, and Model Context Protocol (MCP). Strong technical understanding of modern identity threat vectors (AiTM phishing, info-stealer malware, session hijacking). * Technical Influence: The ability to author clear Architecture Decision Records (ADRs) and confidently influence at the VP/CTO level, serving as a true peer to product management and product engineering. * Executive Presence & Communication: Elite verbal and written communication skills. You can translate deep, ambiguous technical architecture into compelling business value for C-suite executives and excel in front of a camera or a live audience. WORK-LIFE BALANCE & TRAVEL We highly value work-life balance and protect our team's time. Travel is limited and generally planned well in advance. Your travel footprint will primarily consist of Oktane (our flagship conference) and Oktane on the Road. WHY THIS ROLE IS DIFFERENT This role gives you the backing of a world-class security leader, the freedom to contribute to open source, a public platform to build your personal brand, and the elite challenge of securing the next frontier of identity.   #P25449_3486113 #LI - hybrid The Okta Experience * Supporting Your Well-Being  * Driving Social Impact  * Developing Talent and Fostering Connection + Community We are intentional about connection. Our global community, spanning over 20 offices worldwide, is united by a drive to innovate. Your journey begins with an immersive, in-person onboarding experience designed to accelerate your impact and connect you to our mission and team from day one. Okta is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, marital status, age, physical or mental disability, or status as a protected veteran. We also consider for employment qualified applicants with arrest and convictions records, consistent with applicable laws. If reasonable accommodation is needed to complete any part of the job application, interview process, or onboarding please use this Form to request an accommodation. Notice for New York City Applicants & Employees: Okta may use Automated Employment Decision Tools (AEDT), as defined by New York City Local Law 144, that use artificial intelligence, machine learning, or other automated processes to assist in our recruitment and hiring process. In accordance with NYC Local Law 144, if you are an applicant or employee residing in New York City, please click here to view our full NYC AEDT Notice.

Legora

ABOUT US Legora is redefining how legal work gets done. Not built for lawyers, built with them. We work alongside the world’s best legal teams, who expect excellence, precision, and speed, and we hold ourselves to the same bar. Our AI-native workspace lets legal professionals move faster, think more clearly, and operate with sharper precision. By analysing thousands of documents in minutes and powering end-to-end workflows, we cut through complexity, teams can focus on what matters: judgment, strategy, and outcomes. 1,000+ customers across 50+ countries trust us, including Cleary Gottlieb, Goodwin, Linklaters, White & Case, Dentons, and Barclays. We’ve scaled to $100M+ in ARR, with teams across Europe, North America and APAC, and continue to expand through acquisitions including Qura, Walter AI and Graceview. We partner with world-class performers: including Aaron Judge and the New York Yankees, Ludvig Åberg (and his caddie), and campaigns featuring Jude Law. Joining Legora means three things. * We lean in: ownership over titles, outcomes over intentions. * We fight for excellence: high standards, direct, ego-free feedback. * We grow together: as a team and with our customers. Mission before ego. Everyone contributes. No one coasts. If you’re driven by impact, pace, and raising the bar. This is the place. When an issue is too deep for any other tier, it comes to you. You are Legora's final technical authority on how the platform behaves in the real world, not just how it is specced to behave. In legal AI, that gap matters: a platform that behaves differently than promised is not just a bug report, it is a risk to a client's matter, their deadline, or their trust in the product. Your edge is investigative judgment and platform mastery, not writing code: you close the gap between what the product promises and what customers experience, before and after it ships. This is a parallel technical-authority seat working hand in hand with Product Operations, without the software development scope of an engineer. WHAT YOU’LL DO * Own the hardest problems: Take the deepest technical escalations from across the function and drive them to root cause through rigorous log, data, and system-level analysis. * Validate the platform before it ships: Support beta testing and pre-GA investigations. Identify where real platform behavior diverges from the spec, pressure-test workflows under real conditions, and deliver findings to Product Operations with clear reproduction steps before they become customer-facing incidents. * Detect and declare systemic events: Identify when individual tickets share a common root cause and trigger coordinated incident response before volume makes the pattern undeniable. Own the signal that turns a cluster of cases into a declared Sev1 or Sev2 incident. * Be the AI subject-matter expert: Serve as the expert on platform behavior and AI output patterns, including accuracy, retrieval quality, document processing, and anomalous output. * Be the support function's voice in Product and Engineering: Bring the real-world pattern of platform failures into product reviews, release planning, and engineering discussions. Surface what the support tiers see that Product Operations does not, and advocate for the diagnostic tooling, observability improvements, and platform fixes that make the function faster and the product more reliable. * Drive technical root cause in incidents: Serve as the technical counterpart to the Principal Platform Advisor on Sev1 and Sev2 events, owning real-time diagnosis, Engineering liaison, and the technical path to resolution while the PPA holds customer coordination. Hand confirmed defects to Product Operations with clean reproduction steps and impact assessment. * Build leverage: Define and drive the diagnostic tooling, test frameworks, and automation that make every tier faster. Feed escalation trends back into product and process improvements, partnering with Product Operations to close the loop. * Raise the bar: Mentor and serve as final-filter reviewer for the specialists across the function. * Cover the clock: This role operates within a global follow-the-sun coverage model. Working hours may include occasional ad-hoc requirements outside the standard schedule. We will communicate any such requirements as early as practicable. WHAT YOU BRING * You have worked deep in technical support, solutions, or a platform-specialist role with a strong technical bent. * You are rigorous about the root cause, and logs, data, and systems are where you are at home. * You understand how LLM and AI systems behave, including how failure modes present to users. * You translate technical findings clearly for both Product Operations and customer-facing teams. * You are effective in cross-functional settings. You can represent the support function's perspective in engineering and product conversations and translate field patterns into product arguments that land. * You are composed under pressure and have experience working major escalations in parallel with customer-facing teams, without losing rigor on the technical investigation. * You think in patterns across cases, not just within them, and you act on a signal before it becomes a problem the customer names first. * A background in legal AI, document processing, or retrieval-augmented systems is a plus. WHAT’S IN IT FOR YOU * Global collaboration: Partner with teams and clients across regions, on work that crosses every major legal market. * Meaningful work: Your work shapes how the world’s leading legal teams adopt AI day to day. * Competitive package: Comprehensive salary, benefits, and the tools to do your best work. * In-person environment: A workspace built for ambitious builders. Legora is an Equal Opportunity Employer At Legora, we believe great teams are built on diversity of thought and experience. We’re proud to be an equal opportunity employer and committed to creating an inclusive, high-performance culture where everyone can do their best work. We welcome people of all backgrounds and don’t discriminate based on race, color, religion, national origin, gender, gender identity or expression, sexual orientation, age, disability, veteran status, or any other characteristic protected by law.