Lead Platform Engineer, Identity & Access

What you'll do

• Set the identity architecture and roadmap, and manage Okta configuration, standards, hardening, and infrastructure as code.
• Automate identity lifecycle and application onboarding; design access controls, approval workflows, reviews, and audit evidence.
• Respond to identity incidents, partner with Security on telemetry and detection, and manage the Okta vendor relationship, licensing, and cost.

What they ask for

• At least 8 years in identity, platform, or infrastructure engineering, including ownership of a workforce identity platform at meaningful scale.
• Hands-on enterprise identity provider architecture experience; fluency in SAML, OIDC, OAuth 2.0, and SCIM, including token- and assertion-level debugging.
• Experience with identity governance, RBAC, HRIS-driven lifecycle automation, and audit requirements; grounding in Zero Trust, identity-based attacks, device trust, and non-human identity security.
• Scripting ability (Python, JavaScript, or similar), infrastructure as code experience such as Terraform, and ability to communicate with senior and executive audiences and drive architecture decisions.

Nice to have

• Okta experience is strongly preferred.
• Experience governing identities for AI tools and agents, and Okta certifications.

Pay

USD $232,000 - 290,000 base salary (Zone A); USD $217,600 - 272,000 base salary (Zone B); USD $204,800 - 256,000 base salary (Zone C)

Tools

Okta, Terraform, SCIM, SAML, OIDC, OAuth 2.0, Python, JavaScript

AI focus

Strengthen governance of identities for AI tools and agents; experience in this area is a nice-to-have. The posting also mentions using AI tools with good judgment and developing fluency in emerging technologies.