Staff Identity Engineer — IAM & AI Security Leader

Okta; Bellevue (WA); On-site; USD 161,000 - 221,000; Full time

Job summary

Okta is seeking a Staff Identity Engineer to be the technical authority within our internal IAM team, owning the architecture and execution of our identity fabric. You’ll mentor engineers, influence IAM designs, and drive adoption of internal capabilities before global release.

You will implement adaptive MFA, SAML/OIDC, and multi-cloud guardrails, align with SOC 2, ISO 27001, and FedRAMP, and partner with Security and Compliance to ensure audit-ready controls across AWS, GCP, and Azure.

Qualifications

• 4+ years of hands-on experience designing, implementing, and maintaining enterprise IAM solutions.
• Deep expertise in managing complex Okta environments (OIE, Directory Integrations, Advanced Policies, Workflows, and Platform APIs).
• Advanced expertise in modern authentication protocols (OIDC, OAuth 2.0, SAML 2.0) and phishing-resistant MFA (FIDO2/WebAuthn).
• IaC and cloud guardrails across multi-cloud environments (AWS, GCP, Azure).
• Session/security concepts: token management and CAEP/eSSO.
• Automation-first mindset with enterprise security/compliance focus.
• Mentorship and engineering leadership experience.
• Willingness to travel occasionally.

Responsibilities

• Drive internal Customer Zero execution, adopting new capabilities before global release.
• Own lifecycle, policy design, adaptive MFA, and federation (SAML/OIDC) for enterprise tenants.
• Mentor engineers, review IAM designs, and set engineering standards across teams.
• Drive automation-first initiatives and align with audit requirements (SOC 2, ISO 27001, FedRAMP).
• Partner with Security, Audit and Compliance to ensure identity controls meet standards.
• Collaborate with cross-functional teams to translate milestones into leadership updates.

Skills

IAM architecture

OIDC/OAuth/SAML

FIDO2/WebAuthn

Okta Platform

Terraform

Okta Workflows

MFA/Zero Trust

Multi-cloud

Mentorship

SOC2

ISO 27001

FedRAMP

Tools

AWS

GCP

Azure

Job description

Okta is seeking a Staff Identity Engineer to be the technical authority within our internal IAM team, owning the architecture and execution of our identity fabric. You’ll mentor engineers, influence IAM designs, and drive adoption of internal capabilities before global release.

You will implement adaptive MFA, SAML/OIDC, and multi-cloud guardrails, align with SOC 2, ISO 27001, and FedRAMP, and partner with Security and Compliance to ensure audit-ready controls across AWS, GCP, and Azure.