Search results for "SAML/OIDC/OAuth2"

Okta

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. Position Description: The Services Architect is a technical authority on both cloud and on-premises based IT systems and is responsible for ensuring the successful design and implementation of Okta’s industry leading cloud identity platform for our customers. You will focus on Okta’s Workforce Identity Cloud offering targeted at customer identity use cases.  You will develop relationships with customers to help them achieve their business goals while promoting creative solutions.  You will establish yourself as a trusted partner with your customers with a focus on their success.  You will translate business needs and insights into an actionable strategy and assist customers in driving their initiatives to results and high business value. This is a key member of the Professional Services (PS) team, working as part of a PS Delivery Team on each customer implementation. Job Duties and Responsibilities: * Review and lead the gathering of business, functional and technical requirements for establishing an Identity platform powered by Okta for our customers.  * Work with customers to document the common technical and functional requirements for specific solutions. * Support creation of project plans to develop and implement the proposed solution. * Participate as a member of the professional services delivery team to translate requirements to designs and to provide technical leadership and oversight. * Assist in periodic customer health-checks and project reviews. Minimum REQUIRED Knowledge, Skills, and Abilities: * 8+ years of overall IT / software development experience, solution design and technical architecture experience * 3+ years of consulting experience * 3+ years driving application architecture design * 3+ years of experience with (IAM) architectures * 3+ years of experience with implementing cloud computing solutions such as AWS, Google Apps, Salesforce etc. * Experience with customer identity use cases for B2C and B2B: user registration, multifactor authentication, SSO, delegated administration, social identities. * Demonstrated ability to work and interact with CxOs and high-level customer executives. * Experience in leading discovery workshop to derive customer requirements, specifications, business processes. * Experience in developing functional specifications and system design specifications for customer engagements. * Strong knowledge of Security Architecture, Design and Operations, LDAP, Active Directory, SAML, SSO, RBAC, OAuth, OIDC, web protocols XML, SOAP, JSON, REST * Proficiency in one or more of Java, .Net, JavaScript, Angular, React * Familiarity with IAM solution providers is strongly desired. * Experience integrating with a multitude of On-Prem and SaaS based products. * Exhibits confidence and a deep understanding of emerging industry practices when solving business problems. * Identifies critical issues with ease. * Effectively communicates technical information to non-technical audiences. * Manages customer expectations effectively. * Application Architecture Background * Architected distributed systems * Application Design experience * Software Development * Consultative to lead a customer and drive business questions * Clear and Dynamic Communication * Ability to travel up to 50% Highly Desirable Knowledge, Skills, and Abilities: * Okta Expertise, Experience, Certifications * Knowledge of software development security and cryptography. * Experience with API Gateways, CASB, Reverse Proxies (NGINX) * Knowledge of cloud/virtualization technologies, such as VMware vSphere, EC2, Xen, KVM, OpenStack * Proficiency with various open-source software and development tools * Proficiency in one or more of .Net, Ruby, Java, Python or Perl * Proficiency in git and Subversion Education and Certification * A Bachelor’s degree (or equivalent) in Computer Science, Information Technology or related discipline required. * Okta Certified Technical Architect or a combination of Okta Certified Consultant and Okta Certified Developer will be a plus. * TOGAF and/or CISSP certification is a plus. Okta is an Equal Opportunity Employer #LI-Remote P25340 The OTE range for this position for candidates located in the San Francisco Bay area is between: $224,000—$308,000 USD Below is the annual On Target Compensation (OTE) range for candidates located in California (excluding San Francisco Bay Area), Colorado, Illinois, New York and Washington. Your actual OTE, which is inclusive of base salary and incentive compensation, will depend on factors such as your skills, qualifications, experience, and work location. In addition, Okta offers equity (where applicable) and benefits, including health, dental and vision insurance, 401(k), flexible spending account, and paid leave (including PTO and parental leave) in accordance with our applicable plans and policies. To learn more about our Total Rewards program please visit: https://rewards.okta.com/us.  The annual OTE range for this position for candidates located in California (excluding San Francisco Bay Area), Colorado, Illinois, New York, and Washington is between: $200,000—$275,000 USD Below is the annual salary range for candidates located in Canada. Your actual salary will depend on factors such as your skills, qualifications, and experience. In addition, Okta offers equity (where applicable), bonus, and benefits, including health, dental, and vision insurance, RRSP with a match, healthcare spending, telemedicine, and paid leave (including PTO and parental leave) in accordance with our applicable plans and policies. To learn more about our Total Rewards program, please visit: https://rewards.okta.com/can. The annual OTE (On Target Earning) range for this position for candidates located in Canada is between: $206,300—$256,300 USD The Okta Experience * Supporting Your Well-Being  * Driving Social Impact  * Developing Talent and Fostering Connection + Community We are intentional about connection. Our global community, spanning over 20 offices worldwide, is united by a drive to innovate. Your journey begins with an immersive, in-person onboarding experience designed to accelerate your impact and connect you to our mission and team from day one. Okta is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, marital status, age, physical or mental disability, or status as a protected veteran. We also consider for employment qualified applicants with arrest and convictions records, consistent with applicable laws. If reasonable accommodation is needed to complete any part of the job application, interview process, or onboarding please use this Form to request an accommodation. Notice for New York City Applicants & Employees: Okta may use Automated Employment Decision Tools (AEDT), as defined by New York City Local Law 144, that use artificial intelligence, machine learning, or other automated processes to assist in our recruitment and hiring process. In accordance with NYC Local Law 144, if you are an applicant or employee residing in New York City, please click here to view our full NYC AEDT Notice.

Okta

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. The Auth0 Solutions Engineering team are involved in all stages of the customer’s development lifecycle and are experienced using presentations, email, phone and social media to connect with customers. We are looking for great teammates who are able to work in close partnership with the sales team to progress opportunities toward successful conclusion. We believe in Okta’s Solutions Engineers empathise with existing and prospective customers to quickly discern the true technical needs in the context of their business, by asking detailed and clarifying questions and presenting solutions that target those needs. You have the rare combination of technical savviness and business insight and you’re looking for a career where you can utilise both. As a Solutions Engineer at Okta, you will hone each of these skills by advising a diverse set of customers on what is possible using the Auth0 Identity Platform.   What you’ll be doing: * Comprehensive discovery. Understanding the requirements of customers and prospects in the context of their desired business outcomes. * Deal progression. Working in close partnership with the sales team to progress opportunities. * Manage technical sales progression from discovery to technical win. * Building sales presentations, product demonstrations and educating customers (everyone from developers to product managers to C-level executives) on the best ways to cloud security technology. * Have a hands-on approach to solution validation, such as building and delivering. custom demonstrations, supporting customer-led PoCs etc. * Empathising with customers and quickly discern their true technical needs by asking detailed and clarifying questions and presenting solutions that target those needs. * Using your technical savviness and business insights. As a Sales Engineer at Okta, you will hone each of these skills by advising a diverse set of customers on what is possible using Auth0. * Maintain a broad and deep technical understanding of the Auth0 product line and the underlying technologies and protocols. * Proactive engagement in local and regional sales and marketing events * Expertise in AI-driven customer experience integration with Auth0, including AI agents for internal or external use-cases, MCP servers, and Fine-Grained Authorization. What you’ll bring to the role: * Experience working in a Pre-Sales role as Sales Engineer or Solutions Engineer. * An ability to quickly articulate complex ideas around a technical topic, ideally on the fly at a whiteboard. * Experience in a customer-facing role such as consulting, support, teaching, or pre-sales. * Experience with at least one standard identity protocol (e.g. OIDC, OAuth2, SAML, LDAP). * Strong development background with proficiency in at least one backend stack (e.g., Java, C#, Node.js, Python, PHP, Ruby) and a popular frontend stack (e.g., React, Angular, Vue). * Experience working with REST APIs and SDKs. * An understanding of core security concerns within a typical application (password hashing, SSL/TLS, encryption at rest, XSS, XSRF). * Excellent communication skills and an ability to articulate business value. * An ability to disperse knowledge to a highly skilled and experienced audience. * A natural at building relationships, listening, and managing time well. * Enjoy traveling and meeting customers. * Bonus points if you have experience in any of the following! * Experience with Identity & Access Management, Single Sign-on and API-based solutions * An understanding of Agentic AI and the role that Identity plays in enforcing continuous oversight * Experience in mobile (iOS, Android) development * Experience working with HTTP, HTML, and REST services. This includes using the dev tools in a browser to explain HTTP traffic and an HTTP client (like curl or Postman) to interact with an HTTP service. The role is based in Ireland and the expectation will be that you will spend 2-3 days a week either meeting with prospective customers, existing customers, or collaborating with the team in the Office. This role covers the Southern Africa and Israel regions.   #LI-Hybrid #LI-JP3 Below is the annual On Target Compensation (OTE) range for candidates located in Ireland. Your actual OTE, which is inclusive of base salary and incentive compensation, will depend on factors such as your skills, qualifications, experience, and work location. In addition, Okta offers equity (where applicable) and comprehensive healthcare coverage and financial benefits including paid time off and parental leave in accordance with our applicable plans and policies. To learn more about our Total Rewards program please visit: https://rewards.okta.com/irl. The OTE range for this position for candidates located in Ireland is between: €104.000—€143.000 EUR The Okta Experience * Supporting Your Well-Being  * Driving Social Impact  * Developing Talent and Fostering Connection + Community We are intentional about connection. Our global community, spanning over 20 offices worldwide, is united by a drive to innovate. Your journey begins with an immersive, in-person onboarding experience designed to accelerate your impact and connect you to our mission and team from day one. Okta is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, marital status, age, physical or mental disability, or status as a protected veteran. We also consider for employment qualified applicants with arrest and convictions records, consistent with applicable laws. If reasonable accommodation is needed to complete any part of the job application, interview process, or onboarding please use this Form to request an accommodation. Notice for New York City Applicants & Employees: Okta may use Automated Employment Decision Tools (AEDT), as defined by New York City Local Law 144, that use artificial intelligence, machine learning, or other automated processes to assist in our recruitment and hiring process. In accordance with NYC Local Law 144, if you are an applicant or employee residing in New York City, please click here to view our full NYC AEDT Notice.

Snowflake

At Snowflake, we are powering the era of the agentic enterprise. To usher in this new era, we seek AI-native thinkers across every function who are energized by the opportunity to reinvent how they work. You don’t just use tools; you possess an innate curiosity, treating AI as a high-trust collaborator that is core to how you solve problems and accelerate your impact. We look for low-ego individuals who thrive in dynamic and fast-moving environments and move with an experimental mindset — who rapidly test emerging capabilities to discover simpler, more powerful ways to deliver results. At Snowflake, your role isn't just to execute a function, but to help redefine the future of how work gets done. We are hiring a Senior Software Engineer across our Identity, Data Security and Trust organization. These teams builds the security backbone of Snowflake — enabling customers to confidently bring their most sensitive data and workloads to the Data Cloud, empowering every Snowflake engineer to deliver the most secure platform at scale, and giving customers the tools to monitor, achieve, and maintain a strong security, governance, privacy, and compliance posture. As the agentic era accelerates, these teams are at the forefront of building AI-native security capabilities that protect the world's data. AS A SENIOR SOFTWARE ENGINEER AT SNOWFLAKE, YOU WILL: * Design and implement critical AI security capabilities — including controlled, audited agent workflows, MCP server and client security, agent identity frameworks, and admin guardrails — that form the foundation for secure agentic enterprise adoption * Build and evolve foundational identity and access management systems, including authentication protocols, SSO integrations, multi-factor authentication, OAuth/OIDC, SAML, SCIM, and fine-grained RBAC that scales to millions of objects and users * Design and develop core security infrastructure spanning secret management, key management, service identity, and end-to-end encryption across a natively multi-cloud environment * Build and maintain security tooling to define, monitor, enforce, and detect policy violations across the platform; implement automation and self-service processes that increase developer autonomy and promote secure-by-default engineering * Design and implement extensible, plug-and-play platform components that enable first-, second-, and third-party security detectors, responders, and visualizations to be built on top of Snowflake's Trust Center * Leverage industry-accredited benchmarks (e.g., CIS) to develop standards-based security posture assessments; contribute to behavioral analytics pipelines and PII attribution capabilities that help detect, prevent, and respond to threats and abuse vectors * Partner with engineering teams across the company to understand security pain points and deliver solutions that reduce friction without compromising safety * Lead the design and enforcement of secure network architectures to actively defend against ransomware attacks and detect sophisticated data exfiltration attempts. * Participate in design reviews, code reviews, and on-call rotations; hold a high bar for code quality, reliability, and sound technical decisions OUR IDEAL SENIOR SOFTWARE ENGINEER WILL HAVE: * 5+ years of industry experience designing, building, and operating large-scale distributed systems in production cloud environments * Strong foundational computer science skills — data structures, algorithms, systems design, and distributed computing * Proficiency in one or more of Java, C++, Python, Golang, or Rust, with solid SQL skills for data-driven features * Experience shipping and on-calling production services with a focus on availability, reliability, and observability * A collaborative, low-ego approach to engineering — comfortable iterating quickly and working across PM, design, and peer engineering teams * BS in Computer Science, Computer Engineering, or a related technical discipline, or equivalent practical experience BONUS POINTS FOR THE FOLLOWING: * Knowledge of identity and access management concepts and protocols — SAML, SCIM, OAuth, OIDC, Federation, MFA, or RBAC * Familiarity with security infrastructure domains such as secret management, key management, service identity, authentication, or authorization * Experience with database internals, query engines, or data platform systems * Exposure to machine learning or AI systems, particularly applied to anomaly detection, behavioral analytics, or risk classification * Contributions to developer platforms, SDKs, or multi-tenant extensibility frameworks * Experience deploying and operating services on Kubernetes or production cloud platforms (AWS, Azure, or GCP) WHY JOIN OUR IDENTITY, DATA SECURITY AND TRUST TEAM AT SNOWFLAKE? These teams sit at a rare intersection: the security, identity, infrastructure, and customer trust layers of one of the fastest-growing data platforms in the world. You won't be maintaining someone else's security layer; you'll be defining it. These are teams that value craft, curiosity, and collaboration, and that take pride in making complex security invisible to the developers and customers who depend on it. If you want a role where your technical decisions matter and your growth is tied directly to the scale of the platform you're protecting — and you're energized by the challenge of securing the agentic era before it fully arrives — this is it. Snowflake is growing fast, and we’re scaling our team to help enable and accelerate our growth. We are looking for people who share our values, challenge ordinary thinking, and push the pace of innovation while building a future for themselves and Snowflake. How do you want to make your impact? For jobs located in the United States, please visit the job posting on the Snowflake Careers Site for salary and benefits information: careers.snowflake.com

Okta

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. THE OPPORTUNITY As organizations successfully adopt phishing-resistant MFA, attackers have shifted their tactics—increasingly deploying Adversary-in-the-Middle (AiTM) phishing kits and info-stealer malware to execute session hijacking via cookie theft. Furthermore, with the explosive rise of autonomous AI workloads, securing human identity is no longer enough; we must now protect and govern a fast-growing sprawl of non-human, agentic workflows. We are looking for a highly mature, technically elite, and customer-obsessed Identity Solutions Architect to drive the technical execution of our Identity Security & Agentic Identity portfolio. In this role, you will be a cornerstone of the "Okta on Okta" team, acting as Customer Zero. Reporting directly to the VP of IAM, you will work hand-in-hand with our Principal Product Managers. While the PM shapes the portfolio strategy, you will own the technical architecture, internal deployment blueprints, and the public stage. You will shepherd cutting-edge features from Alpha through Early Availability (EA)—guaranteeing we are our own first and best customer before these solutions scale to the rest of the world. KEY PORTFOLIO FOCUS AREAS As the Identity Solutions Architect, you will architect the technical blueprints and deployment strategies for Okta’s premier identity security offerings across both our workforce and developer platforms: * AI Agent & Agentic Identity Security: Architecting how Okta governs non-human, autonomous AI workloads across O4AA (Okta for AI Agents) and A4AA (Auth0 for AI Agents), defining secure authentication and authorization patterns. * Next-Gen Guardrails: Designing token exchange patterns, security gateways, and implementing the Model Context Protocol (MCP) to secure agent-to-data interactions. * Hardware-Bound Session Security: Designing Okta’s defense against session cookie thievery by leveraging cryptographically hardware-bound tokens (Okta DBSSO and Chrome DBSC). * Advanced Threat & Posture Management: Deploying Identity Threat Protection (ITP) for continuous risk evaluation and Identity Security Posture Management (ISPM) to eliminate hidden vulnerabilities across human and machine identities. * Identity Governance & Administration (IGA): Designing and enforcing modern access governance, including automated lifecycle management, self-service access request workflows, and continuous access certification using Okta Identity Governance. * Privileged Access Management (PAM): Architecting secure, just-in-time (JIT) access to critical infrastructure, managing secrets, and securing privileged sessions using Okta Privileged Access. WHAT YOU’LL BE DOING (YOUR IMPACT) * Governance & Privileged Access Leadership: Lead the internal Customer Zero deployment of Okta IGA and PAM. You will blueprint workflows for least-privilege access, ensuring robust compliance and security over Okta's most sensitive administrative, server, and infrastructure entitlements. * Customer Zero Lifecycle Execution (Alpha to EA): Act as the lead architect testing and deploying Alpha identity security features within Okta’s internal IAM environment. Author the technical rollout blueprints and provide the core engineering teams with critical feedback. * Anti-Session Hijacking Architecture: Design the internal implementation blueprint for how Okta DBSSO and Chrome DBSC complement one another, creating an ironclad, layered defense that protects corporate endpoints from token and cookie exfiltration. * Open-Source & Community Leadership: Lead the technical effort to open-source the complimentary tools our Customer Zero team builds, transitioning our internal innovations into a massive, thriving community effort with our customers. * Thought Leadership & Personal Brand: Take the microphone. You will help lead a dedicated "how-to" video series and a potential podcast this year, and take the stage at major events to share our internal playbook. * Ecosystem Integration: Define how Okta identity is woven into modern orchestration layers (LangChain/Graph, n8n, AWS AgentCore, Google Vertex ADK) and model providers (Azure Foundry, AWS Bedrock, OpenAI, Anthropic). MASSIVE INDUSTRY COLLABORATION As the technical face of Okta’s Customer Zero team, you will have unique, high-impact opportunities to collaborate closely with strategic engineering and identity infrastructure teams at major enterprise tech companies, leading cloud service providers, and top-tier security vendors. WHAT YOU’LL BRING TO THE ROLE * Professional Maturity & Architecture Expertise: 8+ years of overall IT/software development and technical architecture experience, with 3+ years specifically focused on IAM/Security Architecture. You have a proven track record of securing non-human identities (NHIs) or machine-to-machine infrastructure in production. * Governance & PAM Experience: Demonstrated experience deploying Identity Governance (IGA) and Privileged Access Management (PAM) solutions, including just-in-time (JIT) access, infrastructure security, lifecycle management, and access certification. * Protocol & Threat Literacy: Knowledge of core protocols: OAuth2/OIDC (especially Token Exchange), SAML, mTLS, JWT, and Model Context Protocol (MCP). Strong technical understanding of modern identity threat vectors (AiTM phishing, info-stealer malware, session hijacking). * Technical Influence: The ability to author clear Architecture Decision Records (ADRs) and confidently influence at the VP/CTO level, serving as a true peer to product management and product engineering. * Executive Presence & Communication: Elite verbal and written communication skills. You can translate deep, ambiguous technical architecture into compelling business value for C-suite executives and excel in front of a camera or a live audience. WORK-LIFE BALANCE & TRAVEL We highly value work-life balance and protect our team's time. Travel is limited and generally planned well in advance. Your travel footprint will primarily consist of Oktane (our flagship conference) and Oktane on the Road. WHY THIS ROLE IS DIFFERENT This role gives you the backing of a world-class security leader, the freedom to contribute to open source, a public platform to build your personal brand, and the elite challenge of securing the next frontier of identity.   #P25449_3486113 #LI - hybrid The Okta Experience * Supporting Your Well-Being  * Driving Social Impact  * Developing Talent and Fostering Connection + Community We are intentional about connection. Our global community, spanning over 20 offices worldwide, is united by a drive to innovate. Your journey begins with an immersive, in-person onboarding experience designed to accelerate your impact and connect you to our mission and team from day one. Okta is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, marital status, age, physical or mental disability, or status as a protected veteran. We also consider for employment qualified applicants with arrest and convictions records, consistent with applicable laws. If reasonable accommodation is needed to complete any part of the job application, interview process, or onboarding please use this Form to request an accommodation. Notice for New York City Applicants & Employees: Okta may use Automated Employment Decision Tools (AEDT), as defined by New York City Local Law 144, that use artificial intelligence, machine learning, or other automated processes to assist in our recruitment and hiring process. In accordance with NYC Local Law 144, if you are an applicant or employee residing in New York City, please click here to view our full NYC AEDT Notice.

Okta

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. Job Duties and Responsibilities: Collaborate with account executives to develop and execute territory and account strategies to maximize the Okta opportunity in those accounts Conduct research and discovery to understand customer requirements and communicate the business value of solving technology problems using cloud technology Execute the delivery of POCs for customers with complex use cases, collaborating with other Okta engineering teams as needed Craft technical content to show customers how to implement specific use cases or standard methodologies for new technologies Prepare and deliver demos to showcase how the Okta platform meets customer’s business needs and use cases.   Distill and communicate customer needs and product feedback to Product Management, Engineering, Marketing and Sales Required Skills: 5+ years pre-sales engineering experience A passion to serve the customer, which has played out in some customer-facing role like consulting or support, ideally solutions engineering An ability to quickly and effectively communicate complex technical concepts via presentation, slides and whiteboard  A Strong Understanding of Identity & Access Management (IAM) SSO, MFA, SCIM, OAuth 2.0, OIDC, SAML, and LDAP. Lifecycle management, role-based access control (RBAC), and provisioning/deprovisioning. A strong understanding of Zero Trust Architecture and core security concerns within a typical application (password hashing, SSL/TLS, encryption at rest, XSS, XSRF) Hands-on experience in one or more of the following areas is a plus: web (JavaScript, HTML, frontend frameworks) development, mobile (iOS, Android) development, backend (Java, C#, Node.js, Python, PHP, Ruby) development, IP-based real-time communications Experience with cloud platforms: AWS, Azure, GCP. You are an elite communicator Can identify, map, and manage multiple personas: IT admins, CISOs, architects, procurement, and legal. Confident dispensing knowledge to a highly skilled and experienced audience Typically 10-25% travel Bachelor's degree in Engineering, Computer Science, MIS or a comparable field is preferred. P25462_3491192 LL-Remote The OTE range for this position for candidates located in the San Francisco Bay area is between: $179,000—$246,000 USD Below is the annual On Target Compensation (OTE) range for candidates located in California (excluding San Francisco Bay Area), Colorado, Illinois, New York and Washington. Your actual OTE, which is inclusive of base salary and incentive compensation, will depend on factors such as your skills, qualifications, experience, and work location. In addition, Okta offers equity (where applicable) and benefits, including health, dental and vision insurance, 401(k), flexible spending account, and paid leave (including PTO and parental leave) in accordance with our applicable plans and policies. To learn more about our Total Rewards program please visit: https://rewards.okta.com/us.  The annual OTE range for this position for candidates located in California (excluding San Francisco Bay Area), Colorado, Illinois, New York, and Washington is between: $160,000—$220,000 USD The Okta Experience * Supporting Your Well-Being  * Driving Social Impact  * Developing Talent and Fostering Connection + Community We are intentional about connection. Our global community, spanning over 20 offices worldwide, is united by a drive to innovate. Your journey begins with an immersive, in-person onboarding experience designed to accelerate your impact and connect you to our mission and team from day one. Okta is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, marital status, age, physical or mental disability, or status as a protected veteran. We also consider for employment qualified applicants with arrest and convictions records, consistent with applicable laws. If reasonable accommodation is needed to complete any part of the job application, interview process, or onboarding please use this Form to request an accommodation. Notice for New York City Applicants & Employees: Okta may use Automated Employment Decision Tools (AEDT), as defined by New York City Local Law 144, that use artificial intelligence, machine learning, or other automated processes to assist in our recruitment and hiring process. In accordance with NYC Local Law 144, if you are an applicant or employee residing in New York City, please click here to view our full NYC AEDT Notice.

Okta

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. THE IDENTITY TEAM The Identity team's mission is to secure the world's identity connections while building the foundational trust layer for the modern enterprise. As organizations successfully adopt phishing-resistant MFA, attackers have shifted their tactics—increasingly deploying Adversary-in-the-Middle (AiTM) phishing kits and info-stealer malware to execute session hijacking via cookie theft. Furthermore, with the explosive rise of autonomous AI workloads, securing human identity is no longer enough; we must now protect and govern a fast-growing sprawl of non-human, agentic workflows. ABOUT THE ROLE As a Principal Identity Engineer at Okta, you will be the cornerstone of our internal IAM team, driving the vision, strategy, and execution of our identity infrastructure. In this role, you will champion our "Customer Zero" philosophy, partnering directly with our product engineering teams to deploy Okta’s newest features, products, and capabilities internally before they ever hit the market. This is a highly autonomous, high-impact role for a technical leader who acts with a fierce sense of ownership and urgency. We are looking for someone who turns action into traction, ruthlessly simplifies complex problems, and scales solutions. You will not only raise your own bar but will actively pull the rest of the team up with you, serving as a mentor and strategic visionary. Working in close partnership with product, security, and engineering teams, you will influence the future of the platform by validating emerging capabilities, driving innovation, and ensuring the organization is ready to adopt new technologies—including AI-powered services and intelligent agents. As a trusted technical leader, you will mentor engineers, influence architectural decisions, and help determine what’s next for the platform. RESPONSIBILITIES * Act as the primary bridge between internal stakeholders, IAM and Okta’s core Product teams. You will ensure Okta is the first to deploy its own cutting-edge capabilities, providing world-class, rigorous feedback to mature products and catch bugs before they reach global customers. * Serve as a foundational pillar and mentor for the IAM engineering team, fostering a culture of high performance, continuous learning, and technical excellence. * Embody the philosophy of "Move fast, simplify, and repeat." You will identify systemic inefficiencies, automate legacy processes, and champion agile execution. * Take initiative to identify what is needed next and lead the organization toward it. * Partner daily with cross-functional stakeholders to push the boundaries of identity security, modern authentication, and governance. * Act as both the architect and the technical implementer for key strategic initiatives, rolling up your sleeves to implement, guide, and validate critical deployments. * Regularly deliver clear, data-driven leadership updates, translating complex technical milestones and risks into strategic insights for Okta’s executive team. * Establish, track, and report on key performance metrics and KPIs to prove the health, security, and maturity of our IAM ecosystem. * Facilitate design strategy and successful execution of playbook adoption, planning, and intake processes. * Drive the secure adoption of AI technologies by designing, deploying, and governing AI agents and AI-enabled services within the enterprise. TECHNICAL REQUIREMENTS & QUALIFICATIONS To be successful in this role, you should have deep, hands-on architectural experience across the modern identity and cloud infrastructure lifecycle. We are looking for a practitioner who understands both theory and real-world implementation. * 10+ years experience implementing and/or supporting enterprise IAM solutions * Expertise with industry IAM concepts and best practices, particularly relating to SSO, MFA, IGA, and PAM * Deep expertise in modern authentication protocols (OIDC, OAuth 2.0, SAML 2.0) and advanced multi-factor authentication paradigms, including FIDO2/WebAuthn, passkeys, and phishing-resistant MFA. * Comprehensive understanding of secure session lifetimes, token binding, token revocation strategies, and continuous access evaluation to mitigate session hijacking risks. * Proven experience designing and securing machine-to-machine (M2M) communication and cloud-native service-to-service authentication. * Deep knowledge of enterprise secrets management architectures (e.g. Okta Privileged Access) ensuring secure storage, dynamic rotation, and strict access controls. * Advanced proficiency using IaC tools, specifically Okta Workflows and Terraform, to manage identity configuration, access policies, and cloud infrastructure as code. * Strong background in integrating IAM configuration and testing into modern CI/CD pipelines (e.g., GitHub Actions, GitLab CI) to ensure safe, automated, and repeatable deployments. * Experience leading and developing other engineers * Leads by a automation first mindset * Occasional travel as required #P5614_3488197 #LI - hybrid The Okta Experience * Supporting Your Well-Being  * Driving Social Impact  * Developing Talent and Fostering Connection + Community We are intentional about connection. Our global community, spanning over 20 offices worldwide, is united by a drive to innovate. Your journey begins with an immersive, in-person onboarding experience designed to accelerate your impact and connect you to our mission and team from day one. Okta is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, marital status, age, physical or mental disability, or status as a protected veteran. We also consider for employment qualified applicants with arrest and convictions records, consistent with applicable laws. If reasonable accommodation is needed to complete any part of the job application, interview process, or onboarding please use this Form to request an accommodation. Notice for New York City Applicants & Employees: Okta may use Automated Employment Decision Tools (AEDT), as defined by New York City Local Law 144, that use artificial intelligence, machine learning, or other automated processes to assist in our recruitment and hiring process. In accordance with NYC Local Law 144, if you are an applicant or employee residing in New York City, please click here to view our full NYC AEDT Notice.

Okta

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. ABOUT OKTA FOR AI AGENTS Okta secures access for 20,000 organizations and billions of users. Okta for AI Agents extends that work to the agentic shift. Deploying an AI agent is not like deploying traditional software. You are putting professional work output into production, and it needs deep integration, continuous tuning, and change management. Every agent needs an identity, a scope, an audit trail, and a way to be shut down when it goes wrong. Most enterprises have not built this yet. We are. We hire builders who see the cracks in enterprise agent identity that everyone else has learned to live with. THE ROLE You are the most senior technical field authority for agent identity at Okta. Where a Senior FDE owns the outcome inside one account, you own the patterns that every account and every FDE inherits. You take the hardest and most strategic deployments yourself, set the reference architecture the team builds from, and turn what the field learns into the direction the product takes. You still write code. You also multiply the people around you, and you are the person product and engineering leadership call when an agent identity problem has no precedent. RESPONSIBILITIES * Own the reference architecture. Define the canonical agent identity, delegation, audit, and kill-switch patterns that Senior FDEs deploy across the portfolio, and keep them current as the standards and the product move. * Lead the hardest accounts. Personally own the most strategic, regulated, or technically novel deployments, the ones where there is no playbook yet. * Raise the technical bar. Review other FDEs’ architectures, coach senior customer engineers and your own team, and set the standard for what good looks like in the field. * Shape the roadmap. Synthesize patterns across every account into a clear point of view, and work directly with product and engineering leadership to prioritize what ships next. * Represent Okta as a technical authority. Brief CISO, CIO, and Chief AI Officer audiences, contribute to the standards and frameworks shaping agent identity, and carry the external technical voice. * Resolve what others cannot. Step into the hardest technical and political situations across accounts and find the path forward. * Set the standard for evals and observability. Define how the team measures authorization latency, scope sprawl, delegation anomalies, audit completeness, and kill-switch verification, so it scales beyond any single customer. * Build the team’s leverage. Turn recurring field work into reusable modules, internal tooling, and enablement so the whole FDE function moves faster. REQUIREMENTS * Engineering depth. 10+ years shipping production software, with deep distributed systems and identity experience and a track record of staying hands-on while setting direction. * Authority-level identity protocols. OAuth 2.0, OIDC, SAML, SCIM, RFC 8693 token exchange, act claims, CIMD and DCR, DPoP. Contribution to standards or open source is a plus. * Deep agent security fluency. OWASP Top 10 for Agentic Applications, NIST AI RMF, MITRE ATLAS, plus MCP, A2A, ISO/IEC 42001, and the EU AI Act, with the judgment to apply them in HIPAA, FedRAMP, and SOC 2 environments. * Expert fine-grained authorization. ReBAC and ABAC with policy engines (OPA, Cedar, OpenFGA, or equivalent), and command of the design tradeoffs at scale. * Proven AI hands-on. Production integrations across the major agent platforms and MCP, and daily AI-native development. * Force multiplier. A record of setting technical direction across multiple teams or accounts, and of mentoring senior engineers. * Customer-facing authority. Credible from the IDE to the boardroom, trusted by CISOs and principal engineers alike, and steady when account politics get sharp. * High agency, founder’s mindset. Applied to building a function, not just an account. * Ability to travel, on occasion, up to 35% #LI-Remote (P24675_3470403) Below is the annual On Target Compensation (OTE) range for candidates located in the United Kingdom. Your actual OTE, which is inclusive of base salary and incentive compensation, will depend on factors such as your skills, qualifications, experience, and work location. In addition, Okta offers equity (where applicable) and comprehensive healthcare coverage and financial benefits including paid time off and parental leave in accordance with our applicable plans and policies. To learn more about our Total Rewards program please visit: https://rewards.okta.com/gbr. The OTE range for this position for candidates located in the United Kingdom is between: £114,000—£172,000 GBP The Okta Experience * Supporting Your Well-Being  * Driving Social Impact  * Developing Talent and Fostering Connection + Community We are intentional about connection. Our global community, spanning over 20 offices worldwide, is united by a drive to innovate. Your journey begins with an immersive, in-person onboarding experience designed to accelerate your impact and connect you to our mission and team from day one. Okta is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, marital status, age, physical or mental disability, or status as a protected veteran. We also consider for employment qualified applicants with arrest and convictions records, consistent with applicable laws. If reasonable accommodation is needed to complete any part of the job application, interview process, or onboarding please use this Form to request an accommodation. Notice for New York City Applicants & Employees: Okta may use Automated Employment Decision Tools (AEDT), as defined by New York City Local Law 144, that use artificial intelligence, machine learning, or other automated processes to assist in our recruitment and hiring process. In accordance with NYC Local Law 144, if you are an applicant or employee residing in New York City, please click here to view our full NYC AEDT Notice.

Okta

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. Job Description: Demo Engineer Demo Engineering sits at the intersection of go-to-market and product, serving as a global accelerator for Okta's technical sales success. Our team provides our internal and partner technical sellers worldwide with the capabilities to quickly and securely showcase how Okta secures identity for employees, customers, and AI agents. As a member of this team, you'll have a global impact on Okta’s go-to-market technology strategy: the demo components and customer experiences you build will be used by hundreds of Solution Engineers across dozens of countries, reaching thousands of customers and prospects. You'll work in a highly collaborative, engineering-driven culture where we prioritize reusability, automation, and self-service enablement. We're building the platform and tooling that makes Okta's field organization more effective, scalable, and customer-focused. What you get to do in this role: * Design and build reusable demonstration assets that encapsulate product configurations used across multiple demonstrations for solution-oriented outcomes * Work directly with field teams to understand customer perspectives to capture their expectations, preferences, and aversions in a “Voice of the Customer” * Work with Field Readiness team to drive adoption of the Demo Platform within the go-to-market organization * Build analytics and reporting to track demo usage and effectiveness * Collaborate with Product Managers and Engineering to prepare assets to support demonstrations of new product introductions. * Participate in the release planning process to influence the product direction based on customer feedback * Create supporting documents for demos like technical demonstration guides and video examples. Technical Foundations: * Bachelor’s degree or equivalent experience. * 5+ years of developer experience with Enterprise SaaS products. * Full Stack development experience: React.js, Node.js, AWS Serverless patterns (Lambda, DynamoDB, SQS and SNS) * Experience designing and building for multi-tenancy and tenant isolation * Experience with infrastructure-as-code or configuration management tools * API integration experience for connecting applications to identity platforms * Have working technical knowledge of digital identity and authentication (OAuth, OIDC & SAML) Mindset and Work Style: * Global first: comfortable working in and supporting a globally distributed team * Self-directed and proactive: identifies opportunities to improve and drives solutions without waiting for direction * Collaborative: thrives in cross-functional environments working with field teams, product, and engineering * Systems thinker: balances immediate needs with long-term scalability and reusability * Customer-centric approach: ability to gather and synthesize "Voice of Customer" feedback into actionable requirements Nice to Have: * Experience with demo engineering teams or technical marketing * Experience with presales * Experience with Okta or Auth0 #LI-Remote #LI-CM   P21866_3462403 The OTE range for this position for candidates located in the San Francisco Bay area is between: $179,000—$246,000 USD Below is the annual On Target Compensation (OTE) range for candidates located in California (excluding San Francisco Bay Area), Colorado, Illinois, New York and Washington. Your actual OTE, which is inclusive of base salary and incentive compensation, will depend on factors such as your skills, qualifications, experience, and work location. In addition, Okta offers equity (where applicable) and benefits, including health, dental and vision insurance, 401(k), flexible spending account, and paid leave (including PTO and parental leave) in accordance with our applicable plans and policies. To learn more about our Total Rewards program please visit: https://rewards.okta.com/us.  The annual OTE range for this position for candidates located in California (excluding San Francisco Bay Area), Colorado, Illinois, New York, and Washington is between: $160,000—$220,000 USD The Okta Experience * Supporting Your Well-Being  * Driving Social Impact  * Developing Talent and Fostering Connection + Community We are intentional about connection. Our global community, spanning over 20 offices worldwide, is united by a drive to innovate. Your journey begins with an immersive, in-person onboarding experience designed to accelerate your impact and connect you to our mission and team from day one. Okta is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, marital status, age, physical or mental disability, or status as a protected veteran. We also consider for employment qualified applicants with arrest and convictions records, consistent with applicable laws. If reasonable accommodation is needed to complete any part of the job application, interview process, or onboarding please use this Form to request an accommodation. Notice for New York City Applicants & Employees: Okta may use Automated Employment Decision Tools (AEDT), as defined by New York City Local Law 144, that use artificial intelligence, machine learning, or other automated processes to assist in our recruitment and hiring process. In accordance with NYC Local Law 144, if you are an applicant or employee residing in New York City, please click here to view our full NYC AEDT Notice.

Okta

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. ABOUT OKTA FOR AI AGENTS Okta secures access for 20,000 organizations and billions of users. Okta for AI Agents extends that work to the agentic shift. Deploying an AI agent is not like deploying traditional software. You are putting professional work output into production, and it needs deep integration, continuous tuning, and change management. Every agent needs an identity, a scope, an audit trail, and a way to be shut down when it goes wrong. Most enterprises have not built this yet. We are. We hire builders who see the cracks in enterprise agent identity that everyone else has learned to live with. THE ROLE You are the most senior technical field authority for agent identity at Okta. Where a Senior FDE owns the outcome inside one account, you own the patterns that every account and every FDE inherits. You take the hardest and most strategic deployments yourself, set the reference architecture the team builds from, and turn what the field learns into the direction the product takes. You still write code. You also multiply the people around you, and you are the person product and engineering leadership call when an agent identity problem has no precedent. RESPONSIBILITIES * Own the reference architecture. Define the canonical agent identity, delegation, audit, and kill-switch patterns that Senior FDEs deploy across the portfolio, and keep them current as the standards and the product move. * Lead the hardest accounts. Personally own the most strategic, regulated, or technically novel deployments, the ones where there is no playbook yet. * Raise the technical bar. Review other FDEs’ architectures, coach senior customer engineers and your own team, and set the standard for what good looks like in the field. * Shape the roadmap. Synthesize patterns across every account into a clear point of view, and work directly with product and engineering leadership to prioritize what ships next. * Represent Okta as a technical authority. Brief CISO, CIO, and Chief AI Officer audiences, contribute to the standards and frameworks shaping agent identity, and carry the external technical voice. * Resolve what others cannot. Step into the hardest technical and political situations across accounts and find the path forward. * Set the standard for evals and observability. Define how the team measures authorization latency, scope sprawl, delegation anomalies, audit completeness, and kill-switch verification, so it scales beyond any single customer. * Build the team’s leverage. Turn recurring field work into reusable modules, internal tooling, and enablement so the whole FDE function moves faster. REQUIREMENTS * Engineering depth. 10+ years shipping production software, with deep distributed systems and identity experience and a track record of staying hands-on while setting direction. * Authority-level identity protocols. OAuth 2.0, OIDC, SAML, SCIM, RFC 8693 token exchange, act claims, CIMD and DCR, DPoP. Contribution to standards or open source is a plus. * Deep agent security fluency. OWASP Top 10 for Agentic Applications, NIST AI RMF, MITRE ATLAS, plus MCP, A2A, ISO/IEC 42001, and the EU AI Act, with the judgment to apply them in HIPAA, FedRAMP, and SOC 2 environments. * Expert fine-grained authorization. ReBAC and ABAC with policy engines (OPA, Cedar, OpenFGA, or equivalent), and command of the design tradeoffs at scale. * Proven AI hands-on. Production integrations across the major agent platforms and MCP, and daily AI-native development. * Force multiplier. A record of setting technical direction across multiple teams or accounts, and of mentoring senior engineers. * Customer-facing authority. Credible from the IDE to the boardroom, trusted by CISOs and principal engineers alike, and steady when account politics get sharp. * High agency, founder’s mindset. Applied to building a function, not just an account. * Ability to travel (on occasion internationally) up to 35% #LI-Remote (P25253_3456692) The OTE range for this position for candidates located in the San Francisco Bay area is between: $269,000—$369,000 USD Below is the annual On Target Compensation (OTE) range for candidates located in California (excluding San Francisco Bay Area), Colorado, Illinois, New York and Washington. Your actual OTE, which is inclusive of base salary and incentive compensation, will depend on factors such as your skills, qualifications, experience, and work location. In addition, Okta offers equity (where applicable) and benefits, including health, dental and vision insurance, 401(k), flexible spending account, and paid leave (including PTO and parental leave) in accordance with our applicable plans and policies. To learn more about our Total Rewards program please visit: https://rewards.okta.com/us.  The annual OTE range for this position for candidates located in California (excluding San Francisco Bay Area), Colorado, Illinois, New York, and Washington is between: $240,000—$360,000 USD The Okta Experience * Supporting Your Well-Being  * Driving Social Impact  * Developing Talent and Fostering Connection + Community We are intentional about connection. Our global community, spanning over 20 offices worldwide, is united by a drive to innovate. Your journey begins with an immersive, in-person onboarding experience designed to accelerate your impact and connect you to our mission and team from day one. Okta is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, marital status, age, physical or mental disability, or status as a protected veteran. We also consider for employment qualified applicants with arrest and convictions records, consistent with applicable laws. If reasonable accommodation is needed to complete any part of the job application, interview process, or onboarding please use this Form to request an accommodation. Notice for New York City Applicants & Employees: Okta may use Automated Employment Decision Tools (AEDT), as defined by New York City Local Law 144, that use artificial intelligence, machine learning, or other automated processes to assist in our recruitment and hiring process. In accordance with NYC Local Law 144, if you are an applicant or employee residing in New York City, please click here to view our full NYC AEDT Notice.

Okta

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. ABOUT OKTA FOR AI AGENTS Okta secures access for 20,000 organizations and billions of users. Okta for AI Agents extends that work to the agentic shift. Deploying an AI agent is not like deploying traditional software. You are putting professional work output into production, and it needs deep integration, continuous tuning, and change management. Every agent needs an identity, a scope, an audit trail, and a way to be shut down when it goes wrong. Most enterprises have not built this yet. We are. We hire builders who see the cracks in enterprise agent identity that everyone else has learned to live with. THE ROLE You embed inside four to five of Okta’s most strategic enterprise customers as their dedicated technical partner for agent identity. You sit alongside their identity, platform, and security engineering teams, write production code in their environment, and own the technical outcome from prototype through production. You are a builder-consultant. You go past architecture diagrams to code, debug, and ship bespoke agent identity solutions inside the customer’s environment. You ship secure agents faster for the customer, and you feed real field insight back to Okta product engineering. RESPONSIBILITIES * Become the customer’s trusted technical voice on agent security. Sit in their standups, design reviews, and incident response. Earn a seat on their architecture review board and security council for agent risk decisions. * Architect and deploy with the customer’s team. Build Okta’s agent security stack into their infrastructure: Cross-App Access (XAA), Fine-Grained Authorization (FGA), MCP Gateway, and agent client registration. Own the identity, delegation, audit, and kill-switch architecture end to end, and coach their engineers on the patterns. * Engage senior leadership. Brief the CISO, CIO, identity leaders, Chief AI Officer, and principal architects. Translate token-exchange flows into board-level agent risk, and AI governance mandates into architecture. * Deliver white-glove deployment. Agents in production with full identity coverage, security review passed, governance requirements met, and posture visibility online. The customer points to you as the reason their agent program is real. * Keep deployments defensible. Align architecture decisions to OWASP Top 10 for Agentic Applications, NIST AI RMF, and MITRE ATLAS, and to HIPAA, FedRAMP, or SOC 2 where the customer is regulated. * Wire Okta into the customer’s stack. Connect O4AA to their IdP for human-to-agent links, IGA for agent lifecycle, ISPM for posture, SIEM and EDR for behavior coverage, and policy engines for runtime decisions. * Build evals and observability. Authorization decision latency, scope sprawl across agents, anomalous delegation chains, audit completeness, kill-switch verification, and rogue agent detection. * Turn field patterns into product. Extract the recurring gaps from their architects and governance leads, and convert them into reusable modules and roadmap fixes that ship for every other customer. * Be on site. Regular presence at customer locations. Trust and governance alignment happen in the room. REQUIREMENTS * Engineering pedigree. 7+ years shipping production software, still hands-on in the IDE, with on-call experience and operational maturity in systems that authenticate and authorize at high throughput. * Ability to travel, 35% (on occasion internationally) * Identity protocols. OAuth 2.0, OIDC, SAML, SCIM, RFC 8693 token exchange, act claims, CIMD and DCR, DPoP. * Agent security frameworks. Working knowledge of OWASP Top 10 for Agentic Applications, NIST AI RMF, and MITRE ATLAS. Familiarity with MCP, A2A, ISO/IEC 42001, and the EU AI Act. Comfortable mapping deployments to HIPAA, FedRAMP, and SOC 2. * Fine-grained authorization. ReBAC and ABAC with policy engines (OPA, Cedar, OpenFGA, or equivalent), and a working understanding of how agents acquire tokens, call APIs, and delegate. * AI hands-on. Built production integrations with Claude, ChatGPT, Microsoft Copilot, Agentforce, Bedrock, LangChain, CrewAI, the OpenAI Agents SDK, or MCP servers. * AI-native development. Daily use of Claude Code, Cursor, GitHub Copilot, or equivalent. * Customer-facing range. At home in a customer standup and a CISO briefing on the same day. You build trust with senior engineering leaders and you stay in the room when their internal politics get sharp. * High agency, founder’s mindset. A zero-to-one self-starter who owns outcomes end to end. #LI-Remote P25257_3456702 Below is the annual base salary range for candidates located in California (excluding San Francisco Bay Area), Colorado, Illinois, New York and Washington. Your actual base salary will depend on factors such as your skills, qualifications, experience, and work location. In addition, Okta offers equity (where applicable), bonus, and benefits, including health, dental and vision insurance, 401(k), flexible spending account, and paid leave (including PTO and parental leave) in accordance with our applicable plans and policies. To learn more about our Total Rewards program please visit: https://rewards.okta.com/us.    The annual base salary range for this position for candidates located in California (excluding San Francisco Bay Area), Colorado, Illinois, New York, and Washington is between: $200,000—$275,000 USD The Okta Experience * Supporting Your Well-Being  * Driving Social Impact  * Developing Talent and Fostering Connection + Community We are intentional about connection. Our global community, spanning over 20 offices worldwide, is united by a drive to innovate. Your journey begins with an immersive, in-person onboarding experience designed to accelerate your impact and connect you to our mission and team from day one. Okta is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, marital status, age, physical or mental disability, or status as a protected veteran. We also consider for employment qualified applicants with arrest and convictions records, consistent with applicable laws. If reasonable accommodation is needed to complete any part of the job application, interview process, or onboarding please use this Form to request an accommodation. Notice for New York City Applicants & Employees: Okta may use Automated Employment Decision Tools (AEDT), as defined by New York City Local Law 144, that use artificial intelligence, machine learning, or other automated processes to assist in our recruitment and hiring process. In accordance with NYC Local Law 144, if you are an applicant or employee residing in New York City, please click here to view our full NYC AEDT Notice.

Okta

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. The Solutions Engineer Team We believe Solutions Engineers at Okta are involved in all stages of the customer’s digital transformation. Solutions Engineers are experienced using presentations, email, phone and social media to connect with customers virtually and in-person. We are looking for great teammates who can build and deliver sales presentations and customized product demonstrations to help educate Okta’s Customers (everyone from developers to product managers to C-level executives) on best practices during their cloud security technology journey. We believe Okta’s Solutions Engineers empathize with Customers and quickly discern their true technical needs by asking detailed, clarifying questions while presenting solutions that specifically address those needs. Okta Solution Engineers have the rare combination of technical acumen and business insight; in a career where you can utilize both. As a Solutions Engineer at Okta, you will further develop each of these skills by advising a diverse set of customers on the value they will gain by using Okta’s Identity Platform. The Solutions Engineer, Okta Opportunity Reporting to the Senior Manager of Solutions Engineers, the Solutions Engineer (Corporate/New Business) is a functional business consultant, with a passion for technology and the advanced ability to develop, position and demonstrate product-specific solutions during sales cycles, while achieving quarterly and annual sales goals for an assigned territory. What you’ll be doing * Work alongside the Corporate/New Business (employee size 300-1249) sales team as the technical and domain expert of a customer-facing sales team to help Customers understand the value of Okta’s solutions * Understand customer challenges and business issues and provide product demonstrations to align our solutions with customer needs * Answer product feature and technical questions from customers, partners and Okta colleagues * Plan and deliver Proof Of Concepts for customers who have more complex use cases, collaborating with other Okta engineering teams as needed * Provide feedback to product management about product enhancements that can address customer needs and provide additional value * Share and learn best practices and re-usable assets with other Solutions Engineers to enhance the quality and efficiency of the team * Stay current on competitive analysis and market differentiation * Support marketing events including executive briefings, conferences, user groups, and trade shows * At times, be asked to learn and lead your team as a subject matter expert (SME) with various product solutions and/or competitive knowledge What you’ll bring to the role: * Identity and Access Management (IAM) Expertise: * 5+ years of pre-sales engineering experience in IAM. * Strong understanding of IAM concepts, including OAuth 2.0, OIDC, and SAML. * Experience with lifecycle management, role-based access control (RBAC), and provisioning/deprovisioning. * Technical Proficiency: * Hands-on experience in one or more of the following development areas: web (JavaScript, HTML, frontend frameworks), mobile (iOS, Android), backend (Java, C#, Node.js, Python, PHP, Ruby), or IP-based real-time communications. * Experience working with REST APIs, API Gateways, and SDKs. * Deployed applications on cloud platforms (AWS, Azure, GCP, Vercel, etc.). * Understanding of core security concerns in applications (password hashing, SSL/TLS, encryption at rest, XSS, XSRF). * Customer Engagement & Communication: * Passion for serving customers, demonstrated in a customer-facing role (ideally pre-sales, but consulting or support also valued). * Ability to quickly communicate complex technical ideas, including on-the-fly whiteboard explanations. * Elite communication skills, confident in dispensing knowledge and presenting to highly skilled and experienced audiences. * Strategic & Organizational Skills: * Territory management skills, including pipeline building and collaboration with sales counterparts for execution excellence. * Diagramming experience for user journey flows, complex architecture diagrams, etc. * Education & Travel: * Bachelor's degree in Engineering, Computer Science, MIS, or a comparable field is preferred. * Typically 25% travel. You might also have (not mandatory): * Experience with Auth0, Auth0 FGA, or OpenFGA. * Hands-on experience with Generative AI or LLM technology (LangChain, GenKit, LlamaIndex, etc.). * Experience integrating with microservices, data lakes, or customer data platforms. * Developed ReBAC or Fine-Grained Authorization models.     #LI-CM #LI-Remote P13967_3421640 The OTE range for this position for candidates located in the San Francisco Bay area is between: $179,000—$246,000 USD Below is the annual On Target Compensation (OTE) range for candidates located in California (excluding San Francisco Bay Area), Colorado, Illinois, New York and Washington. Your actual OTE, which is inclusive of base salary and incentive compensation, will depend on factors such as your skills, qualifications, experience, and work location. In addition, Okta offers equity (where applicable) and benefits, including health, dental and vision insurance, 401(k), flexible spending account, and paid leave (including PTO and parental leave) in accordance with our applicable plans and policies. To learn more about our Total Rewards program please visit: https://rewards.okta.com/us.  The annual OTE range for this position for candidates located in California (excluding San Francisco Bay Area), Colorado, Illinois, New York, and Washington is between: $160,000—$220,000 USD The Okta Experience * Supporting Your Well-Being  * Driving Social Impact  * Developing Talent and Fostering Connection + Community We are intentional about connection. Our global community, spanning over 20 offices worldwide, is united by a drive to innovate. Your journey begins with an immersive, in-person onboarding experience designed to accelerate your impact and connect you to our mission and team from day one. Okta is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, marital status, age, physical or mental disability, or status as a protected veteran. We also consider for employment qualified applicants with arrest and convictions records, consistent with applicable laws. If reasonable accommodation is needed to complete any part of the job application, interview process, or onboarding please use this Form to request an accommodation. Notice for New York City Applicants & Employees: Okta may use Automated Employment Decision Tools (AEDT), as defined by New York City Local Law 144, that use artificial intelligence, machine learning, or other automated processes to assist in our recruitment and hiring process. In accordance with NYC Local Law 144, if you are an applicant or employee residing in New York City, please click here to view our full NYC AEDT Notice.

Okta

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. The Solutions Engineering Team - *This is a customer facing sales role. You must be in the USA. You will be required to travel at least 25% and attend an in person onboarding session.* The Global Presales organization at Okta brings together a diverse group of experts, including Solutions Engineers, the Office of the Field CTO, Alliances, Architects, and more, who combine deep technical expertise with strategic business insight. This team serves as trusted advisors to a wide range of customers and partners, helping them unlock the full potential of Okta’s Identity Platform. By asking insightful questions, understanding complex challenges, and delivering tailored solutions, we empower organizations to address their unique identity needs. Empathy, collaboration, and a relentless focus on customer success drive our work and set us apart. The Senior Identity Specialist Opportunity Reporting to the Senior Manager, Solutions Engineering, as a Senior Identity Specialist, you will be part of the presales team that delivers sales presentations and product demonstrations.  You will educate customers on the best ways to implement Okta customer identity and access management solutions.  What you’ll be doing:  Strategic Customer Engagement: * * Support strategic customer conversations aligning with technical and engineering leaders and stakeholders. * Deliver on emerging trends, industry best practices, and identity-driven digital transformation. * Assist in preparing executive-level messaging and participate in strategic discussions to align Okta’s solutions with customer business outcomes. * Develop customer-centric points of view that translate Okta’s solutions to customer problems. * Lead deep technical Q&A discovery sessions for prospective customers to uncover their business requirements and communicate the value of solving for those requirements with Okta CIAM solutions. * Deliver interactive presentations and custom product demonstrations, tailoring communication to all levels of technical and customer identity expertise. * Whiteboard solution architecture, modeling how Okta’s CIAM solution will support their business requirements * Design, build, and execute well-defined, outcome-focused POCs * Maintain a broad and deep technical understanding of the Okta customer identity product lines and the underlying technologies and protocols * Craft engaging solution content to position Okta’s value across multiple business units, including software engineering, operations, product management, and business stakeholders Technical Leadership: * * Provide strategic and technical guidance to Solutions Engineering teams across both the Okta and Auth0 identity platforms. * Collaborate with the Global Office of Field CTO office team to deliver actionable insights from the field, validate customer needs, and identify recurring trends for the Okta Product & Engineering teams. * Deliver impactful keynote presentations, webinars, and technical sessions at industry and customer events. Field Enablement and Collaboration: * * Contribute to frameworks, tools, and content to support Solutions Engineering teams in executing effectively. * Partner with sales leadership to identify and address critical business opportunities and challenges. * Drive cross-functional collaboration to ensure seamless execution of global initiatives. * Innovate in tools and techniques to drive excellence and momentum * Partner with Enablement and Field CTO teams to drive regional events and align product messaging for regional GTM and SE teams. Market Influence: * * Represent Okta as a thought leader in the identity and security space. * Influence industry standards and participate in relevant technical advisory boards. Innovation and Strategy: * * Partner closely with OFCTO teams as an advocate for customer-driven innovation, market trends, and GTM insights to provide input to influence product teams. * Support, derive, and champion strategic initiatives that enhance Okta’s differentiation and business impact. What You'll Bring to the Role * 8+ years of experience in a presales or customer-facing role, including at least 3 years experience with CIAM projects * 8+ years of development experience, preferably focused on application integration with identity services * 8+ years of experience working with REST APIs and SDKs  * Experience with customer identity and access management solutions (Okta/Auth0) * Experience with authentication or authorization protocols (OAuth, OIDC, SAML) * Ability to communicate complex ideas and solutions, incorporating whiteboarding, practical examples, and product demonstrations * Demonstrated ability to solve complex technical problems with innovative solutions * Strong communication and presentation skills, with experience contributing to technical events. * Ability to effectively operate in a matrixed organization and manage cross-functional initiatives. * Travel expectation: up to 40% for customer meetings, industry events, and internal off-sites. * This is a remote position. And extra credit if you have experience in any of the following!  * Full-stack web application development experience (frontend and backend) * Mobile (iOS, Android) development * Demonstrated ability to architect and integrate scalable CIAM solutions, leveraging API-first approaches across web, mobile, and cloud platforms. * Expertise in AI-driven customer experience integration with Auth0, including AI agents for internal or external use-cases, MCP servers, and Fine-Grained Authorization #LI-Remote #LI-CM P6323_3425151 The Okta Experience * Supporting Your Well-Being  * Driving Social Impact  * Developing Talent and Fostering Connection + Community We are intentional about connection. Our global community, spanning over 20 offices worldwide, is united by a drive to innovate. Your journey begins with an immersive, in-person onboarding experience designed to accelerate your impact and connect you to our mission and team from day one. Okta is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, marital status, age, physical or mental disability, or status as a protected veteran. We also consider for employment qualified applicants with arrest and convictions records, consistent with applicable laws. If reasonable accommodation is needed to complete any part of the job application, interview process, or onboarding please use this Form to request an accommodation. Notice for New York City Applicants & Employees: Okta may use Automated Employment Decision Tools (AEDT), as defined by New York City Local Law 144, that use artificial intelligence, machine learning, or other automated processes to assist in our recruitment and hiring process. In accordance with NYC Local Law 144, if you are an applicant or employee residing in New York City, please click here to view our full NYC AEDT Notice.

Databricks

P-1494 Databricks is the Lakehouse company. More than 7,000 organizations worldwide — including Comcast, Condé Nast, H&M and over 50% of the Fortune 500 — rely on the Databricks Lakehouse Platform to unify their data, analytics and AI. Databricks is headquartered in San Francisco, with offices around the globe. Founded by the original creators of Apache Spark™, Delta Lake and MLflow, Databricks is on a mission to help data teams solve the world’s toughest problems. To learn more, follow Databricks on Twitter, LinkedIn, andFacebook.  For more information, visit www.databricks.com. About the Role We are looking for an experienced and forward-thinking Senior Manager of Identity & Access Management (IAM) to lead the teams responsible for building and operating our enterprise-wide identity, authentication, authorization, and access governance systems. This leader will own the strategy, architecture, and execution of IAM capabilities that support our employees, customers, and platform services at global scale. As the company grows, IAM is becoming a foundational pillar of our security posture and customer trust. You will ensure that our identity systems are secure, scalable, easy to use, and aligned with Zero Trust principles. This is a highly cross-functional leadership role partnering with engineering, security, IT, compliance, and product teams to deliver identity services that are reliable and secure by default. WHAT YOU’LL DO STRATEGIC LEADERSHIP * Define the long-term IAM strategy, roadmap, and operating model across the enterprise and product ecosystem. * Build scalable identity foundations that support global growth, cloud expansion, and evolving business needs. * Establish best practices for identity lifecycle management, authentication, authorization, provisioning, and governance. BUILD AND LEAD HIGH-PERFORMING TEAMS * Manage and grow IAM engineering and operations teams responsible for identity services, infrastructure, and tooling. * Mentor technical leads and engineers; foster a high-performance and high-accountability culture. * Develop effective team structures and prioritize workstreams aligned to business and security priorities. IAM ARCHITECTURE & ENGINEERING * Lead the design and implementation of IAM capabilities including: * Single Sign-On (SSO), MFA, and federated identity * Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) * Privileged Access Management (PAM) * Identity lifecycle automation * Directory services and identity stores * Just-in-time access and least-privilege models * Drive modernization of legacy systems and implementation of Zero Trust identity principles. * Ensure scalability, high availability, and strong security controls across all identity platforms. GOVERNANCE, COMPLIANCE & RISK * Own identity governance programs including access reviews, audit readiness, onboarding/offboarding controls, and policy enforcement. * Partner with compliance, risk, and legal teams to meet regulatory requirements (SOC2, ISO, FedRAMP, SOX, GDPR, etc.). * Ensure operational rigor, strong documentation, and sustainable controls that withstand audits and customer expectations. CROSS-FUNCTIONAL PARTNERSHIP * Work closely with IT, Product Security, Cloud Infrastructure, and Engineering to embed identity best practices throughout the organization. * Collaborate with product teams to ensure customer-facing identity capabilities are secure, intuitive, and scalable. * Build strong relationships with internal stakeholders and serve as a trusted advisor on identity issues. WHAT YOU BRING * 8–12+ years of experience in security, identity engineering, or related technical fields * Deep technical expertise in modern IAM technologies, directories, authentication protocols (SAML, OIDC, OAuth), and identity standards. * Hands-on architecture or engineering experience within cloud environments (AWS/GCP/Azure). * Experience implementing Zero Trust identity models and privileged access management frameworks. * Strong understanding of identity governance, compliance requirements, and audit processes. Proven track record of leading high-performing teams and delivering complex, cross-functional programs. * Excellent communication, influencing, and stakeholder management skills. WHY JOIN US * Lead and shape the future of the company’s identity strategy during a period of rapid growth. * Work on highly impactful, company-defining initiatives that protect our people, platform, and customers. * Solve complex IAM challenges across cloud, SaaS, and hybrid environments.   Pay Range Transparency Databricks is committed to fair and equitable compensation practices. The pay range(s) for this role is listed below and represents the expected salary range for non-commissionable roles or on-target earnings for commissionable roles.  Actual compensation packages are based on several factors that are unique to each candidate, including but not limited to job-related skills, depth of experience, relevant certifications and training, and specific work location. Based on the factors above, Databricks anticipates utilizing the full width of the range. The total compensation package for this position may also include eligibility for annual performance bonus, equity, and the benefits listed above. For more information regarding which range your location is in visit our page here.   Local Pay Range $217,000—$264,600 USD About Databricks Databricks is the data and AI company. More than 10,000 organizations worldwide — including Comcast, Condé Nast, Grammarly, and over 50% of the Fortune 500 — rely on the Databricks Data Intelligence Platform to unify and democratize data, analytics and AI. Databricks is headquartered in San Francisco, with offices around the globe and was founded by the original creators of Lakehouse, Apache Spark™, Delta Lake and MLflow. To learn more, follow Databricks on Twitter, LinkedIn and Facebook. Benefits At Databricks, we strive to provide comprehensive benefits and perks that meet the needs of all of our employees. For specific details on the benefits offered in your region click here. Our Commitment to Diversity and Inclusion At Databricks, we are committed to fostering a diverse and inclusive culture where everyone can excel. We take great care to ensure that our hiring practices are inclusive and meet equal employment opportunity standards. Individuals looking for employment at Databricks are considered without regard to age, color, disability, ethnicity, family or marital status, gender identity or expression, language, national origin, physical and mental ability, political affiliation, race, religion, sexual orientation, socio-economic status, veteran status, and other protected characteristics. Compliance If access to export-controlled technology or source code is required for performance of job duties, it is within Employer's discretion whether to apply for a U.S. government license for such positions, and Employer may decline to proceed with an applicant on this basis alone.

Okta

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. The Staff Product Security Engineer Opportunity As a Staff Product Security Engineer, you will play a critical role in safeguarding Okta’s products by conducting comprehensive security reviews, guiding engineering teams in secure development practices, and handling externally reported vulnerabilities. You will engage in code reviews, penetration testing, and architectural security assessments to ensure the security of Okta’s platforms and features. This role is not suited for individuals who rely solely on automated vulnerability scanning. Instead, you must possess a deep technical understanding of web applications, backend services, penetration testing methodologies, and secure design principles. A successful candidate will have expertise in authentication protocols (SAML, OAuth, OIDC), threat modeling, and a strong desire to automate security processes by building tools that proactively identify vulnerabilities. You will also be responsible for communicating risks, impact, and remediation strategies to developers, leadership, and external audiences through documentation, presentations, and external publications. The ideal candidate will also demonstrate a deep technical background in assessing AI-integrated software architectures and securing Large Language Models (LLMs) against emerging threats and modern vulnerability classes. The ideal candidate will have an attacker mindset—the ability to think critically, creatively, and like an adversary when solving security challenges. We actively support public disclosure of research and findings through white papers, blog posts, and conference presentations. What You Will Do * Conduct security reviews, including design reviews, threat modeling, and penetration testing of new features and major changes. * Perform manual secure code reviews across multiple programming languages. * Identify and mitigate security vulnerabilities, providing clear guidance to engineering teams. * Lead product security incidents, assess risks, and drive remediation efforts. * Develop security tools and automation to improve vulnerability detection and assessment. * Mentor junior engineers and provide guidance to non-security staff on secure development practices. * Represent Okta externally through security research, conference talks, and publications. What You Bring * Expertise in identifying OWASP Top 10 / CWE Top 25 vulnerabilities through manual code review. * Strong experience in penetration testing and secure development practices. * Deep technical background in assessing Large Language Models (LLMs) and securing AI-integrated software architectures. * Proficiency in multiple programming languages (e.g., Java, Go, Python, C/C++). * Deep understanding of authentication & authorization protocols (OIDC, SAML, OAuth). * Strong communication skills to explain risks and remediation to developers and leadership. * Ability to automate security testing using LLMs and scripting (Python, Bash, etc.). * Experience leading security incidents and risk assessments. Desired Skills and Abilities * Experience in mobile (iOS/Android) and desktop (Windows/macOS) security testing. * Familiarity with SAST, DAST, SCA, and fuzzing tools. * Strong cryptographic knowledge and secure implementation practices. * Experience analyzing network protocols and traffic security. * Ability to develop proof-of-concept exploits to demonstrate vulnerabilities.   #LI-SM1 #LI-Hybrid P25262_3462000 The annual base salary range for this position for candidates located in the San Francisco Bay area is between: $180,000—$247,500 USD Below is the annual base salary range for candidates located in California (excluding San Francisco Bay Area), Colorado, Illinois, New York and Washington. Your actual base salary will depend on factors such as your skills, qualifications, experience, and work location. In addition, Okta offers equity (where applicable), bonus, and benefits, including health, dental and vision insurance, 401(k), flexible spending account, and paid leave (including PTO and parental leave) in accordance with our applicable plans and policies. To learn more about our Total Rewards program please visit: https://rewards.okta.com/us.    The annual base salary range for this position for candidates located in California (excluding San Francisco Bay Area), Colorado, Illinois, New York, and Washington is between: $161,000—$221,000 USD Below is the annual salary range for candidates located in Canada. Your actual salary will depend on factors such as your skills, qualifications, and experience. In addition, Okta offers equity (where applicable), bonus, and benefits, including health, dental, and vision insurance, RRSP with a match, healthcare spending, telemedicine, and paid leave (including PTO and parental leave) in accordance with our applicable plans and policies. To learn more about our Total Rewards program, please visit: https://rewards.okta.com/can. The annual base salary range for this position for candidates located in Canada is between: $141,000—$193,000 CAD The Okta Experience * Supporting Your Well-Being  * Driving Social Impact  * Developing Talent and Fostering Connection + Community We are intentional about connection. Our global community, spanning over 20 offices worldwide, is united by a drive to innovate. Your journey begins with an immersive, in-person onboarding experience designed to accelerate your impact and connect you to our mission and team from day one. Okta is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, marital status, age, physical or mental disability, or status as a protected veteran. We also consider for employment qualified applicants with arrest and convictions records, consistent with applicable laws. If reasonable accommodation is needed to complete any part of the job application, interview process, or onboarding please use this Form to request an accommodation. Notice for New York City Applicants & Employees: Okta may use Automated Employment Decision Tools (AEDT), as defined by New York City Local Law 144, that use artificial intelligence, machine learning, or other automated processes to assist in our recruitment and hiring process. In accordance with NYC Local Law 144, if you are an applicant or employee residing in New York City, please click here to view our full NYC AEDT Notice.

Okta

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. The Security Team Okta is The World's Identity Company. We free everyone to safely use any technology—anywhere, on any device or app. Our Workforce and Customer Identity Clouds enable secure yet flexible access, authentication, and automation that transform how people move through the digital world, putting Identity at the heart of business security and growth. At Okta, we celebrate a variety of perspectives and experiences. We are not looking for someone who checks every box—we're looking for lifelong learners and people who can improve us with their unique experiences. Join our team! We're building a world where Identity belongs to you.   The Staff Product Security Engineer Opportunity The Security team's mission is to strengthen Okta's position as the leading Identity-as-a-service solutions provider by identifying and resolving risks to employees, products, and, most importantly, our customers. The Staff Product Security Engineer joins a team with a single mandate: get ahead of the security risks introduced by agentic systems before they become operational reality at Okta. This is a research and engineering role. The work is long-horizon and adversarial: understanding how prompt injection propagates through an agent with write access to a code repository, how privilege escalation manifests in an orchestration model with dynamic tool bindings, and what an agentic supply-chain attack looks like against an internal developer platform. The findings this team produces shape SDL requirements, feed reusable security tooling across all of Product Security, and drive Okta's AI and agent-based system security approach at the design level. The ideal candidate thinks like an attacker, builds like an engineer, and publishes their findings. We actively support external research disclosure through white papers, blog posts, and conference presentations.   What You Will Do * Conduct offensive security research focused on agentic AI systems: prompt injection, agent privilege escalation, tool-binding abuse, and agentic supply chain attacks against internal developer platforms. * Perform security assessments of Okta's AI platforms—including agentic systems and LLM-integrated products—across design, code, and runtime. * Build reusable security tooling that multiplies the entire Product Security team's capability. * Run the AI security vendor and tooling evaluation program: design and operate a benchmarking harness against AI security tools. * Perform manual code review of AI and agent-based system implementations across multiple languages. * Develop threat models for agentic architectures, orchestration layers, and LLM-integrated services. * Translate research findings into actionable guidance for engineering teams building AI-powered features and platforms. * Represent Okta externally through security research, conference presentations, white papers, and publications. * Mentor engineers across Product Security on AI/agentic security concepts, tooling, and assessment methodology.   What You Bring * 7+ years of experience in information security, with meaningful depth in application security, offensive research, or AI/ML security. * Demonstrated hands-on experience assessing LLM-integrated systems and agentic AI architectures—not just familiarity with the concepts, but evidence of having found real vulnerabilities in them. * Strong offensive mindset: the ability to model what an adversary does with an agentic system, identify where the model's reasoning or the orchestration layer breaks down, and construct scenarios that make the risk concrete. * Experience building security tooling and automation—scripts, scanners, detection logic, or evaluation harnesses—that other engineers actually use. * Proficiency in at least two programming languages (Python and one of: Go, Java, TypeScript, C/C++). * Advanced experience in threat modeling, manual code review, and penetration testing, applied to complex distributed systems. * Knowledge of authentication and authorization protocols (OIDC, OAuth 2.0, SAML) and their implementation risks. * Strong communication skills: the ability to write clearly for technical and non-technical audiences, document research findings with precision, and present at external venues. * Experience producing external security research—publications, conference talks, blog posts, or open-source tooling.   Desired Skills and Abilities * Familiarity with agentic framework internals (tool-use protocols, MCP, function-calling patterns, agent orchestration architectures). * Experience with SAST, DAST, SCA, and fuzzing tooling applied to AI/ML pipelines or CI/CD systems. * Strong cryptographic knowledge and experience in identifying cryptographic implementation flaws. * Ability to develop proof-of-concept exploits that demonstrate AI/agentic vulnerabilities to engineering and product leadership. * Experience contributing to security standards, SDL processes, or vulnerability research programs.   #LI-SM1 #LI-Hybrid #LI-Remote P25264_3461996 The annual base salary range for this position for candidates located in the San Francisco Bay area is between: $180,000—$247,000 USD Below is the annual base salary range for candidates located in California (excluding San Francisco Bay Area), Colorado, Illinois, New York and Washington. Your actual base salary will depend on factors such as your skills, qualifications, experience, and work location. In addition, Okta offers equity (where applicable), bonus, and benefits, including health, dental and vision insurance, 401(k), flexible spending account, and paid leave (including PTO and parental leave) in accordance with our applicable plans and policies. To learn more about our Total Rewards program please visit: https://rewards.okta.com/us.    The annual base salary range for this position for candidates located in California (excluding San Francisco Bay Area), Colorado, Illinois, New York, and Washington is between: $161,000—$221,000 USD The Okta Experience * Supporting Your Well-Being  * Driving Social Impact  * Developing Talent and Fostering Connection + Community We are intentional about connection. Our global community, spanning over 20 offices worldwide, is united by a drive to innovate. Your journey begins with an immersive, in-person onboarding experience designed to accelerate your impact and connect you to our mission and team from day one. Okta is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, marital status, age, physical or mental disability, or status as a protected veteran. We also consider for employment qualified applicants with arrest and convictions records, consistent with applicable laws. If reasonable accommodation is needed to complete any part of the job application, interview process, or onboarding please use this Form to request an accommodation. Notice for New York City Applicants & Employees: Okta may use Automated Employment Decision Tools (AEDT), as defined by New York City Local Law 144, that use artificial intelligence, machine learning, or other automated processes to assist in our recruitment and hiring process. In accordance with NYC Local Law 144, if you are an applicant or employee residing in New York City, please click here to view our full NYC AEDT Notice.

Okta

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. Responsibilities * Support and maintain customers who have implemented the Customer Identity SaaS solution, resolving technical and non-technical customer issues in a timely fashion * Operational management of Support tickets * Build and maintain excellent relationships with clients and achieve the highest level of customer satisfaction * Take end-to-end ownership of customer issues, including initial troubleshooting, identification of root cause and issue resolution. * Exceed customer expectations on response quality, timeliness of responses and overall customer experience. * Serve as internal and external point of contact on customer issues and ensure they are resolved as expediently as possible. * Work as part of our extended support team in a startup atmosphere, doing whatever it takes to exceed customer expectations * Use your business and technical analysis skills and knowledge of the Development lifecycle to solve complex issues and promote best practices * Collaborate with other departments in the company to achieve customer satisfaction * Contribute to and maintain repository of product area specific knowledge and promote a culture of team knowledge sharing and collaboration within Support. Requirements * 5 years+ of technical support and/or software development OR 3 years+ of solid experience in a business or technical analyst role for medium to large scale business software implementation projects * Strong analytical and problem-solving skills * Self-starter — able to come up to speed on complex, difficult concepts with minimal assistance * Ability to quickly context-switch between multiple complex work streams * Instinctive ability to subdivide problems into basic components in order to efficiently pinpoint the root cause of issues * Customer-obsessed attitude — a customer advocate, always going the extra mile * Team player with solid communication and presentation skills * Proactivity — identify opportunities and take preemptive action against potential problems * Continuous growth — permanently look for areas of improvement, make plans on how to improve them, and execute those plans Technical Domain Focus * Knowledge of software development fundamentals and common architectures * Knowledge of HTTP, encryption, basic security concepts * Understanding of authentication and authorization concepts * Knowledge of one or more auth protocols/specifications: Oauth2, OIDC, SAML, WS-FED, LDAP, Azure AD, etc. * Proficient in at least one programming language; ideally JavaScript #LI-Onsite P19357_3403190   The Okta Experience * Supporting Your Well-Being  * Driving Social Impact  * Developing Talent and Fostering Connection + Community We are intentional about connection. Our global community, spanning over 20 offices worldwide, is united by a drive to innovate. Your journey begins with an immersive, in-person onboarding experience designed to accelerate your impact and connect you to our mission and team from day one. Okta is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, marital status, age, physical or mental disability, or status as a protected veteran. We also consider for employment qualified applicants with arrest and convictions records, consistent with applicable laws. If reasonable accommodation is needed to complete any part of the job application, interview process, or onboarding please use this Form to request an accommodation. Notice for New York City Applicants & Employees: Okta may use Automated Employment Decision Tools (AEDT), as defined by New York City Local Law 144, that use artificial intelligence, machine learning, or other automated processes to assist in our recruitment and hiring process. In accordance with NYC Local Law 144, if you are an applicant or employee residing in New York City, please click here to view our full NYC AEDT Notice.