Principal Forward Deployed Engineer, AI Agents

Okta Inc

Confirmed live yesterday High trust
Remote

Quick summary

Work type
Remote
Location
Bellevue, WAChicago, ILSan Francisco, CAToronto, Ontario, Canada
Salary
$269,000–$369,000 / yr
Posted
43 days ago
Freshness
Confirmed live yesterday

Market check

Salary context

Above market

How this pay compares to similar roles

Similar $212k
This role $319k
$138k most similar roles pay here $394k

This role pays more than 92% of similar roles. Most pay $177,250–$246,150 — the shaded band above. At the midpoint, this role pays about $319k versus about $212k for comparable roles.

Based on 240 similar postings.

Employer

About Okta Inc

Okta, Inc. is an American identity and access management company based in San Francisco. It provides cloud software that helps companies manage and secure user authentication into applications, and for developers to build identity controls into applications, websites, web services, and devices.[

Okta Inc currently has 137 open roles on FindRole.

Listed pay typically runs $174,000–$239,000 across 137 roles with salary data.

Most-posted roles

View all roles at Okta Inc

At a glance

TL;DR · Principal Forward Deployed Engineer, AI Agents

As a Principal Forward Deployed Engineer - Okta for AI Agents, you will serve as a senior technical authority focused on agent identity within the Okta for AI Agents team. You will own reference architectures for identity, delegation, and audit patterns while personally leading complex, high-stakes deployments that lack established playbooks. Your daily work involves writing code, mentoring other engineers, and collaborating with product leadership to shape the roadmap based on field insights. The role requires deep expertise in protocols like OAuth 2.0, OIDC, SAML, SCIM, and RFC 8693, alongside proficiency in ReBAC and ABAC using engines like OPA or Cedar. You will navigate technical challenges involving agent security frameworks such as NIST AI RMF and MITRE ATLAS to solve the problem of securing identity for autonomous agents in enterprise environments.

What does a Forward Deployed Engineer earn?

Median $215000 from 45 postings across 23 companies.

See salary data

What you'll do

  • Define and maintain canonical agent identity, delegation, audit, and kill-switch patterns as reference architectures.
  • Lead high-stakes, technically complex, or novel deployments that lack established playbooks.
  • Review peer architectures and coach senior engineers to establish technical standards for the field team.
  • Synthesize field data into actionable insights to influence product and engineering roadmap priorities.
  • Act as a primary technical authority for C-suite audiences and industry standard bodies regarding agent identity.
  • Resolve high-level technical and political roadblocks that other team members cannot resolve.
  • Establish standardized metrics for authorization latency, scope sprawl, and audit completeness across all customers.
  • Convert recurring field tasks into reusable modules and internal tools to increase team efficiency.

What we're looking for

  • Must have 10+ years of experience shipping production software with deep distributed systems and identity expertise.
  • Must possess authority-level knowledge of protocols including OAuth 2.0, OIDC, SAML, SCIM, RFC 8693, and DPoP.
  • Must demonstrate fluency in agent security frameworks such as OWASP for Agentic Applications, NIST AI RMF, and MITRE ATLAS.
  • Must have expertise in fine-grained authorization using ReBAC or ABAC with policy engines like OPA, Cedar, or OpenFGA.
  • Must have hands-on experience with production integrations across major agent platforms and MCP.
  • Must have a proven track record of setting technical direction for multiple teams and mentoring senior engineers.
  • Must possess the ability to serve as a technical authority for C-suite audiences and high-stakes customer environments.
  • Must be able to travel internationally up to 35% of the time.

More like this

Similar roles

Senior Forward Deployed Engineer, AI Agents

Okta Inc

Remote (Bellevue, WA) +3 43 days ago $200,000$275,000
OAuth 2.0 OIDC SAML SCIM ReBAC ABAC OPA Cedar OpenFGA LangChain CrewAI Claude ChatGPT Microsoft Copilot Bedrock OpenAI Agents SDK MCP SIEM EDR NIST AI RMF MITRE ATLAS
7+ yrs exp Remote

Staff Identity Engineer

Okta Inc

Bellevue, WA +2 7 days ago $161,000$221,000
Okta OIDC OAuth 2.0 SAML 2.0 FIDO2 WebAuthn Terraform AWS GCP Azure API SOC 2 ISO 27001 FedRAMP
4+ yrs exp

Staff Identity Engineer

Okta Inc

Bellevue, WA +2 7 days ago $161,000$221,000
Okta OIDC OAuth 2.0 SAML 2.0 FIDO2 WebAuthn Terraform AWS GCP Azure API SOC 2 ISO 27001 FedRAMP
4+ yrs exp

Principal Forward Deployed Engineer, Performance

Arm Holdings

Austin, TX 115 days ago $207,800$281,200
AWS Azure Kubernetes Containers Python Go Java C++ Rust Linux CI/CD Infrastructure-as-Code Observability Distributed Systems High-Performance Computing Data Processing

Senior Forward Deployed AI Engineer

Amd

Santa Clara, CA 51 days ago $204,000$306,000
Python C++ Rust C TypeScript CUDA HIP LLM Reinforcement Learning RLHF PPO DPO GRPO PyTorch Hugging Face JAX TensorFlow Ray vLLM Distributed Systems
Hybrid