Senior Identity Architect for AI & IAM Security

Okta; Chicago (IL); On-site; USD 161,000 - 221,000; Full time

Job summary

Okta is seeking a Staff Identity Engineer to lead the architecture and execution of our identity fabric within internal IAM programs. You will champion Customer Zero, mentor engineers, and drive security governance across cloud platforms to enable secure enterprise authentication and authorization.

This role emphasizes hands-on implementation, automation, and cross-functional leadership, with a focus on SAML/OIDC, MFA, and policy design.

Qualifications

• 4+ years designing enterprise IAM solutions.
• Deep expertise with Okta environments and OIE.
• Proficiency with SAML 2.0, OIDC, OAuth 2.0, MFA (FIDO2).
• Experience defining cloud IAM guardrails across AWS/GCP/Azure.
• Strong automation mindset with IaC and workflows.
• Ability to mentor engineers and drive design reviews.
• Compliance awareness with SOC 2, ISO 27001, FedRAMP.

Responsibilities

• Drive Customer Zero execution by piloting internal capabilities before global release.
• Own lifecycle, policy design, MFA, and federation for enterprise tenants.
• Architect and enforce cloud IAM guardrails across AWS, GCP, Azure.
• Mentor engineers and set engineering standards across teams.
• Lead automation-first initiatives aligning with audit requirements.
• Govern AI security integration for agents and service auth.
• Collaborate with partners to translate milestones into leadership updates.

Skills

IAM design & architecture

Technical leadership

Mentorship

Security governance

Cross-team collaboration

Compliance frameworks (SOC 2, ISO 270,

Cloud IAM concepts

Tools

Okta Identity Engine (OIE)

Okta Workflows

Terraform

SAML 2.0

OIDC

OAuth 2.0

AWS/GCP/Azure IAM guardrails

Job description

Okta is seeking a Staff Identity Engineer to lead the architecture and execution of our identity fabric within internal IAM programs. You will champion Customer Zero, mentor engineers, and drive security governance across cloud platforms to enable secure enterprise authentication and authorization.

This role emphasizes hands-on implementation, automation, and cross-functional leadership, with a focus on SAML/OIDC, MFA, and policy design.