Staff Identity Architect - AI & Cloud IAM Lead

Socket.dev; Bellevue (WA); On-site; USD 161,000 - 221,000; Full time

Benefits offered by this job

Equity

Bonus

Health insurance

401(k)

Paid leave

Job summary

Okta is seeking a Staff Identity Engineer to own the architecture of our identity fabric within the internal IAM team. You will mentor engineers, drive internal adoption of new capabilities, and help shape the platform's future.

This role requires hands-on IAM design across SSO, MFA, and cloud guardrails in AWS, GCP, and Azure, plus a strong automation mindset and security governance aligned with SOC 2, ISO 27001, and FedRAMP.

Qualifications

• 4+ years designing, implementing, and maintaining enterprise IAM.
• Deep Okta experience including OIE, Directory Integrations, Policies, Workflows, and APIs.
• Expertise in OIDC, OAuth 2.0, SAML 2.0 and phishing-resistant MFA.
• Terraform and Okta Workflows for IAM as code; multi-cloud guardrails.
• Experience with session security and CAEP/eSSO.
• Mentor engineers and establish engineering standards.
• Automation-first mindset with SOC 2, ISO 27001, FedRAMP.
• Willingness to travel occasionally.

Responsibilities

• Drive Customer Zero execution by adopting internal capabilities and providing rigorous feedback.
• Own lifecycle, policy design, adaptive MFA, and federation for enterprise tenants; enforce guardrails.
• Mentor engineers and set technical standards across teams.
• Automation-first initiatives to eliminate inefficiencies and ensure audit-ready controls.
• Govern AI security by managing AI agents, machine identities, and service authentication.
• Collaborate with partners to advance identity security and track operational KPIs.

Skills

IAM design

Okta Mastery

OIDC/OAuth

Zero Trust

Mentorship

Automation

Travel

Tools

Terraform

Okta Workflows

Job description

Okta is seeking a Staff Identity Engineer to own the architecture of our identity fabric within the internal IAM team. You will mentor engineers, drive internal adoption of new capabilities, and help shape the platform's future.

This role requires hands-on IAM design across SSO, MFA, and cloud guardrails in AWS, GCP, and Azure, plus a strong automation mindset and security governance aligned with SOC 2, ISO 27001, and FedRAMP.