Staff Identity Engineer: IAM & AI Security Architect

Okta; Washington (District of Columbia); On-site; USD 161,000 - 221,000; Full time

Job summary

Okta is seeking a Staff Identity Engineer to act as a technical authority within the internal IAM team, driving architecture and execution of our identity fabric. You will champion internal adoption before global release, mentor engineers, and set security and automation standards across cloud environments.

Responsibilities include owning lifecycle design, MFA, and federation, plus building API-driven pipelines and guardrails across AWS, GCP, and Azure to simplify complex workflows.

Qualifications

• 4+ years of hands-on experience designing, implementing, and maintaining enterprise-scale IAM solutions.
• Deep expertise in managing complex enterprise Okta environments, including hands-on proficiency with Okta Identity Engine (OIE), Directory Integrations, Advanced Policies, Workflows, and Platform APIs.
• Advanced expertise in modern authentication and authorization standards (OIDC, OAuth 2.0, SAML 2.0) and phishing-resistant MFA paradigms (FIDO2/WebAuthn, Passkeys).
• Proven experience defining identity controls as code using Terraform and Okta Workflows, across multi-cloud environments (AWS, GCP, Azure) and M2M/service-to-service authentication.
• Solid background in session lifecycle security, token management/revocation strategies, and CAEP/eSSO to mitigate session hijacking.
• Demonstrated experience mentoring engineers, driving design reviews, and establishing engineering best practices across teams.
• Automation-first design with experience building identity controls aligned with SOC 2, ISO 27001, FedRAMP.

Responsibilities

• Drive Customer Zero Execution: act as a technical bridge between internal stakeholders and product teams to adopt internal capabilities early.
• Architecture & Hands-On Implementation: own lifecycle, policy design, MFA, and federation across enterprise Okta tenants; enforce guardrails across cloud providers.
• Technical Leadership & Mentorship: mentor engineers, review IAM designs, and set engineering standards.
• Operational & Security Governance: drive automation to remove inefficiencies and align with audit requirements.
• AI Security Integration: govern AI agents and machine identities within the identity layer.
• Cross-Functional Partnering & Metrics: collaborate to advance identity security and translate milestones into leadership updates.

Skills

Domain Experience

Okta Platform Mastery

Core Identity Protocols

Cloud & Infrastructure as Code

Session & Zero Trust Security

Technical Leadership & Mentorship

Compliance & Automation Mindset

Travel

Job description

Okta is seeking a Staff Identity Engineer to act as a technical authority within the internal IAM team, driving architecture and execution of our identity fabric. You will champion internal adoption before global release, mentor engineers, and set security and automation standards across cloud environments.

Responsibilities include owning lifecycle design, MFA, and federation, plus building API-driven pipelines and guardrails across AWS, GCP, and Azure to simplify complex workflows.