Okta

1 week ago

Okta on Okta Identity Architect

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 41 minutes agoStatus: Live

Job Summary

Own the technical architecture and internal deployment blueprints for Okta’s Identity Security and Agentic Identity portfolio, serving as Customer Zero on the “Okta on Okta” team. Lead lifecycle execution from Alpha to Early Availability, architect defenses against session hijacking with hardware-bound tokens, and build next-gen guardrails for agent-to-data access using MCP and secure protocol patterns. Partner with engineering, identity infrastructure, and security vendors to open-source tools and deliver technical thought leadership.

Location: Bellevue, Chicago, New York, San Francisco, Washington

Workplace: Hybrid

Employment Type: Full time

Job Function: Solutions Engineering & Sales Engineering

Seniority: Mid level

Key Responsibilities

•Act as lead architect for Customer Zero lifecycle execution, testing and deploying Alpha identity security features within Okta’s internal IAM environment and authoring rollout blueprints.
•Design anti-session-hijacking architecture using Okta DBSSO and Chrome DBSC to protect endpoints from token and cookie exfiltration.
•Architect secure authentication and authorization patterns for AI agent and agentic identity security across O4AA and A4AA.
•Implement next-gen guardrails including token exchange patterns, security gateways, and MCP to secure agent-to-data interactions.
•Lead open-source and community efforts for the complimentary tools built by the Customer Zero team, and deliver technical thought leadership via videos, events, and possible podcasting.

Travel: Low travel

Pay and Benefits

Salary: USD 242,000 - 332,000 annually

Perks:Health InsuranceDentalVision401kFlexible SpendingPaid LeaveParental Leave

Key Requirements

•8+ years of IT/software development and technical architecture experience, including 3+ years focused on IAM/Security Architecture.
•Proven experience securing non-human identities (NHIs) or machine-to-machine infrastructure in production.
•Hands-on protocol and threat literacy across OAuth2/OIDC (Token Exchange), SAML, mTLS, JWT, and Model Context Protocol (MCP).
•Strong technical ability to author Architecture Decision Records (ADRs) and influence at the VP/CTO level.
•Elite verbal and written communication skills to translate complex architecture into business value for executives.

Experience:8+ yearsIAMIdentity securitySecurity architectureAgentic identityMachine-to-machineNon-human identity

Skills:CommunicationExecutive presenceCustomer obsessionTechnical influenceThought leadership

Languages:English

Tech Stack:OAuth2OIDCToken ExchangeSAMLMTLSJWTModel Context Protocol (MCP)LangChain/GraphN8nAWS AgentCoreGoogle Vertex ADKAzure FoundryAWS BedrockOpenAIAnthropicOkta DBSSOChrome DBSCIdentity Threat Protection (ITP)Identity Security Posture Management (ISPM)Architecture Decision Records (ADRs)

Company Brief

Okta

Provides identity and access management cloud solutions that help organizations secure and manage user authentication, single sign-on, multi-factor authentication, and lifecycle management across applications and devices.

Industry: Cybersecurity

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: San Francisco, United States

Founded: 2009

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

Okta

1 week ago

Okta on Okta Identity Architect

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 41 minutes agoStatus: Live

Job Summary

Location: Bellevue, Chicago, New York, San Francisco, Washington

Workplace: Hybrid

Employment Type: Full time

Job Function: Solutions Engineering & Sales Engineering

Seniority: Mid level

Key Responsibilities

•Act as lead architect for Customer Zero lifecycle execution, testing and deploying Alpha identity security features within Okta’s internal IAM environment and authoring rollout blueprints.
•Design anti-session-hijacking architecture using Okta DBSSO and Chrome DBSC to protect endpoints from token and cookie exfiltration.
•Architect secure authentication and authorization patterns for AI agent and agentic identity security across O4AA and A4AA.
•Implement next-gen guardrails including token exchange patterns, security gateways, and MCP to secure agent-to-data interactions.
•Lead open-source and community efforts for the complimentary tools built by the Customer Zero team, and deliver technical thought leadership via videos, events, and possible podcasting.

Travel: Low travel

Pay and Benefits

Salary: USD 242,000 - 332,000 annually

Perks:Health InsuranceDentalVision401kFlexible SpendingPaid LeaveParental Leave

Key Requirements

•8+ years of IT/software development and technical architecture experience, including 3+ years focused on IAM/Security Architecture.
•Proven experience securing non-human identities (NHIs) or machine-to-machine infrastructure in production.
•Hands-on protocol and threat literacy across OAuth2/OIDC (Token Exchange), SAML, mTLS, JWT, and Model Context Protocol (MCP).
•Strong technical ability to author Architecture Decision Records (ADRs) and influence at the VP/CTO level.
•Elite verbal and written communication skills to translate complex architecture into business value for executives.

Experience:8+ yearsIAMIdentity securitySecurity architectureAgentic identityMachine-to-machineNon-human identity

Skills:CommunicationExecutive presenceCustomer obsessionTechnical influenceThought leadership

Languages:English

Company Brief

Okta

Industry: Cybersecurity

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: San Francisco, United States

Founded: 2009

Website LinkedIn