Principal Forward Deployed Engineer - Okta for AI Agents

1 month, 2 weeks ago
Full-time
Lead
Software Development
Okta

Okta

Okta is a leading independent provider of identity solutions for enterprises, offering a comprehensive range of products and services to connect and protect employees, partners, and customers. With a focus on secure access, authentication, and automati...

Professional Services
5K-10K
Founded 2009

Description

  • Define the canonical reference architecture for agent identity, delegation, audit, and kill-switch patterns across the portfolio.
  • Personally lead the most strategic, regulated, and technically novel customer deployments.
  • Review and improve architectures proposed by other field engineers and coach senior customer-facing technical staff.
  • Synthesize patterns across accounts into actionable recommendations for product and engineering leadership.
  • Represent Okta as a technical authority in briefings with CISO, CIO, and Chief AI Officer audiences.
  • Contribute to external standards and frameworks shaping agent identity.
  • Resolve complex technical and political issues that others cannot unblock.
  • Define evaluation and observability standards for authorization latency, scope sprawl, delegation anomalies, audit completeness, and kill-switch verification.
  • Turn recurring field work into reusable modules, internal tooling, and enablement.
  • Stay hands-on in code while setting technical direction and multiplying the effectiveness of the broader team.

Requirements

  • 10+ years shipping production software, with deep distributed systems and identity experience.
  • Experience staying hands-on while setting technical direction.
  • Deep knowledge of OAuth 2.0, OIDC, SAML, SCIM, RFC 8693 token exchange, act claims, CIMD, DCR, and DPoP.
  • Contribution to standards or open source is a plus.
  • Working knowledge of OWASP Top 10 for Agentic Applications, NIST AI RMF, MITRE ATLAS, MCP, A2A, ISO/IEC 42001, and the EU AI Act.
  • Ability to apply security and compliance frameworks in HIPAA, FedRAMP, and SOC 2 environments.
  • Expertise in ReBAC and ABAC with policy engines such as OPA, Cedar, OpenFGA, or equivalent.
  • Production integrations across major agent platforms and MCP, plus daily AI-native development experience.
  • A record of setting technical direction across multiple teams or accounts and mentoring senior engineers.
  • Credibility with both technical and executive audiences, including CISOs and principal engineers.
  • High-agency, founder’s mindset focused on building a function rather than just supporting an account.

Benefits

  • Annual base salary range of $269,000 to $369,000 for candidates in the San Francisco Bay Area.
  • Annual base salary range of $240,000 to $330,000 for candidates in California outside the Bay Area, Colorado, Illinois, New York, and Washington.
  • Equity eligibility where applicable.
  • Bonus eligibility.
  • Health, dental, and vision insurance.
  • 401(k) plan.
  • Flexible spending account.
  • Paid leave, including PTO and parental leave.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Principal Identity Engineer

Hasbro 5K-10K Consumer Goods

Wizards of the Coast is hiring a Principal Identity Engineer to own the technical direction of its enterprise identity architecture, supporting Zero Trust, privileged access, and identity governance across cloud and on-premises environments.

Active Directory CI/CD Git OpenID Connect PowerShell Pulumi Python REST API SAML Terraform
15 hours, 39 minutes ago

Senior Solution Engineer (Federal)

OPSWAT 251-1K Internet Software & Services

OPSWAT is hiring a Solution Engineer to support critical infrastructure cybersecurity customers by uncovering needs, guiding solution adoption, and helping drive business growth across public- and private-sector accounts.

15 hours, 39 minutes ago

Senior Device Engineer

Dragos 251-1K Professional Services

Dragos is hiring a Senior Device Engineer to build automation software that identifies, fingerprints, and interacts with network-connected devices across critical infrastructure environments.

Cybersecurity Docker Embedded Systems Go HTTP JavaScript Node.js TCP/IP TLS TypeScript
15 hours, 39 minutes ago

Sr. Solutions Engineer - API and Developer Platform

Brave Software 51-250 Internet Software & Services

Brave is hiring a Senior Solutions Engineer for its Search API to support technical sales and help developers evaluate, integrate, and build AI and search products on its independent web index platform.

JavaScript LLM Postman Python
15 hours, 54 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers