Okta on Okta Identity Architect

This is not a traditional architect role. At Okta, an Okta on Okta Identity Architect is the premier technical execution tier above Principal Engineer—acting as the ultimate hands-on practitioner of our own cloud platform. While you won't be writing application code, you will get your hands dirty configuring, extending, and testing the boundaries of the platform. You are the builder who proves our platform works in the real world.

As organizations successfully adopt phishing-resistant MFA, attackers have shifted their tactics—increasingly deploying Adversary-in-the-Middle (AiTM) phishing kits and info-stealer malware to execute session hijacking via cookie theft. Furthermore, with the explosive rise of autonomous AI workloads, securing human identity is no longer enough; we must now protect and govern a fast-growing sprawl of non-human, agentic workflows.

If you stay at a traditional customer organization, you can only deploy what we build. In this role, you get to cross the table, become the elite practitioner of a world-class security platform, get early access to cutting-edge features, and directly influence the future of the platform. You will collaborate directly with other top-tier engineers across our customer base and partner with the absolute pioneers of the identity industry to shape the tools you've spent your career using.

• →The Ultimate "Customer Zero" Platform Practitioner (Alpha to EA): Bring your real-world customer deployment perspective directly into our tenant. Act as the lead hands-on architect configuring and deploying Alpha platform capabilities within Okta’s own corporate IAM tenant. You will serve as the bridge to our core platform product teams, providing the vital, practitioner-level feedback that shapes final platform design.
• →AI Agent & Agentic Identity Security: Lead the hands-on architecture and configuration of how the Okta Platform governs non-human, autonomous AI workloads across O4AA (Okta for AI Agents), defining secure authentication, token exchange, and authorization patterns.
• →Designing Anti-Session Hijacking Defenses: Build the internal technical deployment blueprints for how Okta DBSSO and Chrome DBSC complement one another, leveraging Okta Identity Engine (OIE) to create an ironclad, layered defense that protects corporate endpoints from token and cookie exfiltration.
• →Platform-to-Platform Collaboration: Act as a technical peer and trusted advisor to fellow hands-on practitioners at our customer organizations. You will share your direct, real-world tenant deployment experiences, trade-offs, and lessons learned with the engineers actually building and securing their Okta platforms in the wild.
• →Sharing the Playbook: Contribute to our technical content efforts (such as a deep-dive "how-to" video series, co-hosting internal podcasts, or presenting to fellow practitioners in highly focused, interactive roundtable breakout sessions at Oktane) to share the actual deployment architectures, tenant configurations, and technical playbooks we've built.

• Proven Okta Platform Expertise: Extensive, practical experience managing, configuring, and troubleshooting Okta in complex enterprise production environments. You possess active, hands-on mastery of the Okta Identity Engine (OIE), Directory Integrations, Advanced Policies, Workflows, and Okta Platform APIs—whether you learned this on the job or proved it through certifications.
• Protocol & Threat Literacy: Deep, hands-on knowledge of core protocols: OAuth2/OIDC (especially Token Exchange), SAML, mTLS, JWT, and Model Context Protocol (MCP). Strong technical understanding of modern identity threat vectors (AiTM phishing, info-stealer malware, session hijacking).
• Technical Influence: Serve as an equal technical peer to product management and product engineering, collaborating on feasibility, platform architecture paths, and real-world system behaviors.
• Practitioner Empathy & Communication: Exceptional ability to connect with and speak the language of other hands-on platform engineers and security administrators. You excel at translating highly complex platform configurations into clear, peer-to-peer technical explanations, whether in documentation, video walkthroughs, or collaborative technical workshops.
• Nice To Have: Okta Certified Administrator or Okta Certified Consultant (These are a great plus, but are not required if you have equivalent, proven hands-on engineering experience).

#LI-Remote

P21621_3398002

• Supporting Your Well-Being 
• Driving Social Impact 
• Developing Talent and Fostering Connection + Community

We are intentional about connection. Our global community, spanning over 20 offices worldwide, is united by a drive to innovate. Your journey begins with an immersive, in-person onboarding experience designed to accelerate your impact and connect you to our mission and team from day one.

Okta is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, marital status, age, physical or mental disability, or status as a protected veteran. We also consider for employment qualified applicants with arrest and convictions records, consistent with applicable laws.

If reasonable accommodation is needed to complete any part of the job application, interview process, or onboarding please use this Form to request an accommodation.

Notice for New York City Applicants & Employees: Okta may use Automated Employment Decision Tools (AEDT), as defined by New York City Local Law 144, that use artificial intelligence, machine learning, or other automated processes to assist in our recruitment and hiring process. In accordance with NYC Local Law 144, if you are an applicant or employee residing in New York City, please click here to view our full NYC AEDT Notice.