Senior AI Agent Security Engineer - Forward-Deployed

Okta; Bellevue (CA); On-site; USD 200,000 - 275,000; Full time

Benefits offered by this job

Equity

Bonuses

Health, dental, vision

Job summary

Okta is seeking a hands-on engineer to embed inside enterprise customers as their dedicated agent identity partner. You will write production code in their environment, own the technical outcome from prototype through production, and become the trusted voice on agent security.

This role requires 7+ years shipping production software, willingness to travel, and deep familiarity with OAuth/OIDC, SAML, and policy engines.

Qualifications

• Engineering pedigree with 7+ years shipping production software, hands-on in the IDE.
• Willingness to travel about 35% (including international trips).
• Experience with OAuth 2.0, OIDC, SAML, SCIM, and token exchanges.
• Knowledge of agent security frameworks and risk management standards.
• Familiarity with fine-grained authorization and policy engines.
• Hands-on AI integrations and operator experience with AI agents.
• Proven ability to work with customers and lead engagements.
• Ability to operate with high autonomy and end-to-end ownership.

Responsibilities

• Become the customer’s trusted technical voice on agent security.
• Architect and deploy with the customer’s team, owning end-to-end identity systems.
• Engage senior leadership and translate technical concepts for executives.
• Deliver white-glove deployment with full identity coverage and governance.
• Keep deployments defensible against OWASP Top 10, NIST AI RMF, and MITRE ATLAS.
• Wire Okta into the customer’s stack and lifecycle processes.
• Build evals and observability for latency, delegation, and auditing.
• Turn field patterns into reusable modules and roadmap fixes.
• Be on site with regular customer presence for governance alignment.

Skills

Engineering pedigree

Travel availability

Identity protocols

Agent security

Fine-grained authorization

AI hands-on development

Customer-facing

On-site presence

Job description

Okta is seeking a hands-on engineer to embed inside enterprise customers as their dedicated agent identity partner. You will write production code in their environment, own the technical outcome from prototype through production, and become the trusted voice on agent security.

This role requires 7+ years shipping production software, willingness to travel, and deep familiarity with OAuth/OIDC, SAML, and policy engines.