Lead Platform Engineer, Identity & Access (Okta) — Remote

Royper Royco LLC; United States; Remote; USD 210,000 - 290,000; Full time

Benefits offered by this job

Equity (RSUs)

Health coverage

Parental leave

Flexible vacation

Wellness resources

401(k) match

Job summary

Webflow is seeking a Lead Platform Engineer, Identity & Access to own the workforce identity architecture with Okta at the core, shaping governance, automation, and secure access at scale. You will partner with Security on policy and risk to build reliable systems.

Responsibilities include automating lifecycle events from joiner to leaver, designing RBAC and least privilege, implementing phishing-resistant MFA and device trust, and acting as the primary identity incident responder.

Qualifications

• 8+ years in identity/platform/infrastructure engineering with ownership of a workforce identity platform at scale.
• Strong experience architecting an enterprise identity provider, Okta preferred.
• Fluency in SAML, OIDC, OAuth 2.0, and SCIM, including debugging tokens/assertions.
• Experience with identity governance, RBAC design, HRIS-driven lifecycle automation, audit requirements.
• Strong grounding in Zero Trust and identity-based attacks, including device trust.

Responsibilities

• Own the identity architecture and roadmap for workforce identity with Okta as core platform.
• Manage Okta configuration standards, change control, and IaC/automation.
• Automate identity lifecycle from joiner to leaver using HRIS as truth and SCIM downstream.
• Build onboarding roads, SSO patterns, provisioning templates, and federated access to cloud/src control platforms.
• Design access models with RBAC, least privilege, approval workflows, and audit trails.
• Strengthen access with phishing-resistant MFA, device trust, and governance of non-human identities.
• Serve as escalation point for identity incidents/outages and lead post-incident reviews.
• Manage Okta vendor relationships, licensing, and cost.

Skills

Identity architecture

Okta platform

SAML/OIDC/OAuth 2.0/SCIM

RBAC design

Terraform

Python/JavaScript

Zero Trust

Security collaboration

Tools

Okta

Terraform

Job description

Webflow is seeking a Lead Platform Engineer, Identity & Access to own the workforce identity architecture with Okta at the core, shaping governance, automation, and secure access at scale. You will partner with Security on policy and risk to build reliable systems.

Responsibilities include automating lifecycle events from joiner to leaver, designing RBAC and least privilege, implementing phishing-resistant MFA and device trust, and acting as the primary identity incident responder.