Staff/Principal Identity Engineer

The role

This individual contributor will own the Okta platform, including its architecture, engineering, governance, and operations. You will build security controls for employees, applications, devices, and data.

What you will do

• Own the Okta platform roadmap, architecture, configuration, security posture, integrations, change management and operational reliability.
• Set standards for authentication, authorization, administrative access and recovery.
• Act as the final technical escalation point for complex Okta issues.
• Design and troubleshoot SSO, SAML, OIDC, OAuth and SCIM integrations.
• Own phishing-resistant MFA, risk-based authentication, session controls and device-aware access policies.
• Build secure application onboarding with configuration validation, named owners, approvals and controlled secret handling.
• Build reliable joiner, mover and leaver workflows connecting HR systems, Okta, directories and business applications.
• Establish access reviews, least-privilege controls, privileged access standards and accountable application ownership.
• Deliver identity solutions using Python, Okta APIs, Workflows and other tools.
• Establish ownership, least privilege, credential lifecycle and revocation for service accounts, API tokens, integrations and AI agents.

Required qualifications

• 8-10+ years of relevant experience in identity engineering, IT infrastructure or corporate security
• Expert-level, hands-on Okta experience, including architecture, complex integrations, lifecycle management, authentication policies, governance and production troubleshooting
• Deep understanding of SAML, OIDC, OAuth, SCIM, federation, authentication and authorization
• Demonstrated production engineering with Python and/or JavaScript, APIs and Terraform or equivalent infrastructure as code
• Experience delivering broader corporate security controls across SaaS, endpoints, device trust and data protection
• Independent technical ownership

Nice to have

• HR-driven identity modernization
• Workday integrations
• Active Directory retirement or directory consolidation
• Self-service application onboarding
• Identity governance and privileged access
• Non-human identity, AI-agent or MCP security
• Okta certifications

Benefits

• Medical, Dental & Vision
• Multiple medical plan options through Aetna and Kaiser Permanente
• HSA or Healthcare FSA
• Dental plans via MetLife
• Vision plans via Vision Care
• Generous parental leave
• Free access to Maven Clinic
• Dependent Care FSA
• Free One Medical membership for employees and dependents
• Pre-tax commuter benefits
• Life Insurance + STD/LTD
• 401(K) with generous company match

About the company

Legora is redefining how legal work gets done with an AI-native workspace. The company has 2,100+ customers across 80+ countries and has scaled to $200M+ in ARR.