Staff Identity Security Engineer - IGA/PAM/ISPM

Okta; Bellevue (WA); On-site; USD 161,000 - 221,000; Full time

Job summary

Okta in the United States is seeking a Staff Identity Security Engineer to own OIG, OPA, and ISPM implementations. You’ll set technical direction, mentor engineers, review designs, and drive initiatives from concept to production in an autonomous environment.

The role focuses on identity lifecycle, RBAC, Workday integration, zero standing privilege, and telemetry. You’ll partner with security, engineering, and product teams to strengthen our identity security posture.

Qualifications

• Hands-on design and deployment of IGA, PAM, and ISPM in production.
• Experience with birthright provisioning and RBAC architectures.
• SOX/compliance environments and audit evidence.

Responsibilities

• Own OIG architecture end-to-end — design access workflows, entitlement structures, and certification campaigns.
• Lead lifecycle, birthright, and RBAC strategy — automated birthright access rules and JML.
• Drive Workday integration architecture — balance reconciliation with real-time sync and attribute sets.
• Design mover/leaver automation and privileged session access, JIT elevation, break-glass.
• Mentor engineers, review designs, and communicate risks and roadmaps to leadership.

Skills

OIG Architecture

PAM/ISPM tooling

RBAC design

Workday Integration

Zero Standing Privilege

Executive communication

Education

Bachelor's degree in CS/Engineering

Tools

Okta ISPM

OPA

Okta Workflows

CrowdStrike

Job description

Okta in the United States is seeking a Staff Identity Security Engineer to own OIG, OPA, and ISPM implementations. You’ll set technical direction, mentor engineers, review designs, and drive initiatives from concept to production in an autonomous environment.

The role focuses on identity lifecycle, RBAC, Workday integration, zero standing privilege, and telemetry. You’ll partner with security, engineering, and product teams to strengthen our identity security posture.