Manager, Customer Identity, Security Engineering

Okta Inc.; Dublin; Hybrid; EUR 101,000 - 139,000; Full time

Benefits offered by this job

Equity (where applicable)

Bonus

Healthcare coverage

Paid time off

Parental leave

Job summary

Okta Inc. in Ireland is seeking an experienced Security Engineering Manager for the Customer Identity product unit. You will lead a globally distributed team focused on AI security tooling, gateways, and reviews, partnering with Product, Engineering, and Identity Security to ship secure AI controls.

You will stay hands-on with architecture, prototyping, and coding, while growing the team and shaping its roadmap in a fast-evolving security landscape.

Qualifications

• 3+ years of experience managing security or software engineering teams.
• 8+ years of experience in security engineering, with a strong foundation in cloud infrastructure and/or product security.
• Hands-on development background in Golang and Node.js, and remains hands-on to design/build micro-services and contribute code to security tooling and the AI gateway.
• Hands-on experience with AI/ML security — attacking, defending, or both, and interest in building controls, not just risk assessment.
• Experience performing product security or application security reviews, including threat modeling and architecture/design review, applied to AI/LLM-based systems.
• Working knowledge of AI agent / MCP ecosystem and secure API/gateway infrastructure (authentication, authorization, policy enforcement, auditing).
• Knowledge of AWS/Azure security and Kubernetes; OWASP security standards and secure SDLC practices.
• Proven ability to set technical vision, multi-quarter strategy, and influence cross-organizational security initiatives.
• Strong written and verbal communication skills for engineering, product, and executive audiences.
• Experience leading globally distributed teams across time zones.

Responsibilities

• Hire, lead, and develop a globally distributed team of security engineers.
• Define and execute a multi-quarter roadmap aligned with Customer Identity goals and Okta's security strategy.
• Lead the design and delivery of an internal AI gateway that secures internal AI traffic with authentication, policy enforcement, and observability.
• Be hands-on in architecture, prototypes, and code; set the engineering bar for the team.
• Run an AI security review practice with threat modeling and actionable remediation guidance.
• Review and build security controls addressing risks such as prompt injection and data leakage.
• Turn findings into reusable, secure-by-default controls and patterns.
• Manage intake/prioritization of AI security review requests across time zones.
• Partner with Product/Engineering/Identity Security leadership to embed AI security into the lifecycle.
• Own and influence high-impact AI security architecture decisions across Auth0 and Okta Customer Identity.

Skills

Team leadership

Security engineering

Golang

Node.js

Threat modeling

Architectural design

Cloud security

Communication

Remote team leadership

Security tooling

Tools

AWS

Azure

Kubernetes

OWASP

API gateway

Job description

Secure Every Identity, from AI to HumanIdentity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence.

This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk.

Manager, Customer Identity, Security Engineering

Get to know Okta

Okta is The World’s Identity Company. We free everyone to safely use any technology—anywhere, on any device or app. Our Workforce and Customer Identity Clouds enable secure yet flexible access, authentication, and automation that transforms how people move through the digital world, putting Identity at the heart of business security and growth.

At Okta, we celebrate a variety of perspectives and experiences. We are not looking for someone who checks every single box - we’re looking for lifelong learners and people who can make us better with their unique experiences.

Join our team! We’re building a world where Identity belongs to you.

The Role

We seek a technical, hands-on Security Engineering Manager to build and lead a security engineering team within Auth0 Customer Identity that secures how we build and use AI. The team's work spans two areas. The first is building security tooling and controls for AI, including gateways and guardrails that secure the use of MCP servers, LLMs, agents, and the systems around them. The second is architecting and reviewing the security of our AI products, working shift-left with engineering and product teams so that security is built in from the start of design instead of added afterward.

This role leads a single team embedded within the Customer Identity product unit and works across Product, Engineering, and the broader Okta Security organization to turn AI security guidance into shipped controls, supporting the growth of our global Customer Identity business.

We are an engineering-focused organization that seeks to stay on the cutting edge of security technology and the AI threat landscape. In this role you will set direction for a team that doesn't just advise on AI risk — it builds the gateway, guardrails, and tooling that enforce secure AI usage, and reviews AI systems early enough to shape their design.

You will lead a globally distributed group of talented engineers who share a passion for security and enjoy solving complex problems at scale. This role works closely with and alongside the broader Okta Security team in support of Okta's company-wide security strategy and Okta’s Secure Identity Commitment.

This is a player-coach role. You will stay hands-on: designing and prototyping, writing and reviewing code, challenging architectures, and earning the respect of strong engineers, while also hiring, growing, and retaining your team and shaping its roadmap.

Responsibilities:

• Hire, lead, coach, and develop a globally distributed team of security engineers (Senior through Staff), building a culture of technical excellence, ownership, and pragmatic security
• Define and execute a multi-quarter roadmap for the team, aligned with Customer Identity business goals and Okta's company-wide security strategy, balancing gateway engineering with security review demand
• Lead the design and delivery of an internal AI gateway that secures internal AI traffic — including agent, MCP, and LLM access — with authentication and authorization, policy enforcement, guardrails, auditing, and observability
• Be hands-on in the team's technical work: contribute to architecture, prototypes, and code, and set the engineering bar for the team
• Run an AI security review practice, similar to product security, that assesses AI-enabled features, services, models, and agent/MCP integrations through intake, threat modeling, design review, and actionable remediation guidance
• Review and build security controls for AI systems, addressing risks such as prompt injection, insecure tool and agent permissions, data leakage, excessive agency, model and supply-chain risk, and abuse of agentic protocols (MCP, A2A)
• Turn recurring review findings into reusable, secure-by-default controls, libraries, and patterns that engineering teams can adopt without a security engineer in the loop
• Manage the intake and prioritization of AI security review requests, and decide what the team takes on, defers, or declines in line with capacity
• Partner across Product, Engineering, and Identity Security leadership to embed AI security into the development lifecycle
• Own and influence high-impact AI security architecture decisions across Auth0 and Okta Customer Identity infrastructure
• Communicate risk, progress, and trade-offs clearly to senior leadership, and turn technical findings into clear guidance for engineering and product teams
• Manage team health, prioritization, and delivery across remote, distributed time zones

What this position is not:

• A purely people-management role without technical depth
• Compliance-focused or policy-only AI governance leadership
• Owning reactive patch and vulnerability management as a primary function

Requirements:

• You have 3+ years of experience managing security or software engineering teams, with a track record of hiring, developing, and retaining strong engineers
• You have 8+ years of experience in security engineering, with a strong foundation in cloud infrastructure and/or product security
• You have a hands-on development background in Golang and Node.js, and you remain hands-on, sufficient to design and build micro-services, evaluate prototypes, and contribute code to security tooling and the AI gateway
• You have hands-on experience with AI/ML security — attacking, defending, or both (e.g., LLM/prompt-injection attacks, agentic-system or model abuse, adversarial ML) — and an interest in building controls, not just assessing risk
• You have experience performing product security or application security reviews, including threat modeling and architecture/design review, ideally applied to AI/LLM-based systems
• You have working knowledge of the AI agent / MCP ecosystem and its security implications, and of building secure API or gateway/proxy infrastructure (authentication, authorization, policy enforcement, rate limiting, auditing)
• You have working knowledge and hands-on experience with one or more of the following:
• AWS and/or Azure security
• Kubernetes
• You have strong knowledge of OWASP security standards and frameworks (including the OWASP Top 10 for LLM Applications) and secure coding best practices
• You have a strong foundation in secure software development lifecycle best practices
• You have a proven record of setting technical vision, defining multi-quarter strategy, driving architectural consensus, and influencing cross-organizational security initiatives
• You have strong written and verbal communication skills, with the ability to turn technical findings into clear guidance for engineering, product, and executive audiences
• You have experience leading a globally distributed and remote team across multiple time zones

Bonus points if:

• You have built or led teams building an AI/LLM gateway, proxy, or guardrail platform in a production environment
• You have built or led teams building AI/ML-powered security tooling or defensive automation in a production environment
• You have published security research, CVEs, or conference talks in AI/ML security or identity security
• You have working knowledge and experience with one or more of the following:
  • Adversarial ML, model red-teaming, or AI safety research
  • Identity and access management, including workload and agent identity
  • Full-stack engineering
  • Site reliability engineering
  • Governance, risk and compliance

# P26224_3593987

# LI - Hybrid

Below is the annual salary range for candidates located in Ireland. Your actual salary will depend on factors such as your skills, qualifications, and experience. In addition, Okta offers equity (where applicable), bonus, and comprehensive healthcare coverage and financial benefits including paid time off and parental leave in accordance with our applicable plans and policies. To learn more about our Total Rewards program, please visit: https://rewards.okta.com/irl.

The annual base salary range for this position for candidates located in Ireland is between:

€101.000 — €138.600 EUR

The Okta Experience

• Supporting Your Well-Being
• Driving Social Impact
• Developing Talent and Fostering Connection + Community

We are intentional about connection. Our global community, spanning over 20 offices worldwide, is united by a drive to innovate. Your journey begins with an immersive, in-person onboarding experience designed to accelerate your impact and connect you to our mission and team from day one.

Okta is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, marital status, age, physical or mental disability, or status as a protected veteran. We also consider for employment qualified applicants with arrest and convictions records, consistent with applicable laws.

If reasonable accommodation is needed to complete any part of the job application, interview process, or onboarding please use this Form to request an accommodation.

Notice for New York City Applicants & Employees: Okta may use Automated Employment Decision Tools (AEDT), as defined by New York City Local Law 144, that use artificial intelligence, machine learning, or other automated processes to assist in our recruitment and hiring process. In accordance with NYC Local Law 144, if you are an applicant or employee residing in New York City, please click here to view our full NYC AEDT Notice.