Senior Forward Deployed Engineer

1 day, 21 hours ago
Full-time
Senior
Software Development
Okta

Okta

Okta is a leading independent provider of identity solutions for enterprises, offering a comprehensive range of products and services to connect and protect employees, partners, and customers. With a focus on secure access, authentication, and automati...

Professional Services
5K-10K
Founded 2009

Description

  • Serve as the customer’s trusted technical partner on agent security by participating in standups, design reviews, incident response, and architecture governance forums.
  • Architect and deploy Okta’s agent security stack within customer infrastructure, including Cross-App Access (XAA), Fine-Grained Authorization (FGA), MCP Gateway, and agent client registration.
  • Own the end-to-end identity, delegation, audit, and kill-switch architecture for AI agents and coach customer engineers on implementation patterns.
  • Brief senior leaders such as CISOs, CIOs, identity leaders, Chief AI Officers, and principal architects on agent risk, token-exchange flows, and AI governance.
  • Deliver white-glove production deployments with full identity coverage, passed security review, met governance requirements, and visible security posture.
  • Align solutions to relevant security and compliance frameworks, including OWASP Top 10 for Agentic Applications, NIST AI RMF, MITRE ATLAS, HIPAA, FedRAMP, and SOC 2.
  • Integrate Okta with the customer’s identity, governance, posture, security monitoring, and policy systems, including IdP, IGA, ISPM, SIEM, EDR, and policy engines.
  • Build evaluation and observability capabilities for authorization latency, scope sprawl, delegation anomalies, audit completeness, kill-switch verification, and rogue agent detection.
  • Capture recurring customer needs and translate them into reusable product modules and roadmap improvements for Okta.
  • Work regularly on site with customers to build trust and align on governance decisions.

Requirements

  • 7+ years of experience shipping production software, with hands-on development, on-call experience, and operational maturity in high-throughput authentication and authorization systems.
  • Strong knowledge of identity protocols including OAuth 2.0, OIDC, SAML, SCIM, RFC 8693 token exchange, act claims, CIMD, DCR, and DPoP.
  • Working knowledge of OWASP Top 10 for Agentic Applications, NIST AI RMF, and MITRE ATLAS, with familiarity with MCP, A2A, ISO/IEC 42001, and the EU AI Act.
  • Experience mapping deployments to regulated environments such as HIPAA, FedRAMP, and SOC 2.
  • Experience with fine-grained authorization using ReBAC and ABAC and policy engines such as OPA, Cedar, OpenFGA, or equivalent.
  • Hands-on experience building production integrations with tools or platforms such as Claude, ChatGPT, Microsoft Copilot, Agentforce, Bedrock, LangChain, CrewAI, the OpenAI Agents SDK, or MCP servers.
  • Daily use of AI-native development tools such as Claude Code, Cursor, GitHub Copilot, or equivalent.
  • Ability to operate comfortably with both technical teams and senior executives, including customer standups and CISO briefings.
  • High-agency, founder-style mindset with ownership of outcomes end to end.
  • On-site presence at customer locations as needed; this role is remote but requires regular travel or in-person customer engagement.

Benefits

  • Annual base salary range of $200,000 to $275,000 for candidates in California (excluding San Francisco Bay Area), Colorado, Illinois, New York, and Washington.
  • Equity eligibility where applicable.
  • Bonus eligibility.
  • Health, dental, and vision insurance.
  • 401(k) plan.
  • Flexible spending account.
  • Paid leave, including PTO and parental leave.
  • Remote work with regular in-person customer presence and immersive in-person onboarding.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Technical Account Manager - Electronic Security Systems

K Group Companies 51-250 Internet Software & Services

K Group Companies is hiring a Technical Account Manager in Grand Rapids, Michigan to manage client relationships and support growth across physical security and managed services accounts.

1 hour, 16 minutes ago

Senior Cloud Security Engineer

Anduril Industries 1K-5K Aerospace & Defense

Anduril Industries is hiring a Security Engineer to build and operate defensive controls that protect the infrastructure supporting its advanced defense technology products.

AWS AWS CDK Azure CI/CD GCP Go Linux Network Security Python Rust Secrets Management Terraform
3 hours, 15 minutes ago

ML Solutions Architect

Provectus 251-1K Professional Services

Provectus is hiring an ML Solutions Architect to act as the technical bridge between clients and delivery teams, leading pre-sales, ML architecture, and agentic AI solution design for client-facing projects.

API Gateway AWS Azure Computer Vision Deep Learning GCP Generative AI IoT LLM Machine Learning MLOps Neural Networks
3 hours, 26 minutes ago

Sage Intacct Sales Engineer

Pine Services Group Internet Software & Services

Pine’s Sage Intacct Premier Partner is hiring a remote Sales Engineer to own technical win strategy for mid-market finance software deals in construction, professional services, and distribution.

Microsoft Dynamics 365 NetSuite
3 hours, 28 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers