Staff Identity Engineer

Okta Inc

Confirmed live 2 days ago High trust

Quick summary

Work type
On-site
Location
Bellevue, WAChicago, ILWashington, DC
Salary
$161,000–$221,000 / yr
Posted
7 days ago
Freshness
Confirmed live 2 days ago

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $205k
This role $191k
$151k most similar roles pay here $254k

This role pays less than 61% of similar roles. Most pay $172,500–$238,250 — the shaded band above. At the midpoint, this role pays about $191k versus about $205k for comparable roles.

Based on 240 similar postings.

Employer

About Okta Inc

Okta, Inc. is an American identity and access management company based in San Francisco. It provides cloud software that helps companies manage and secure user authentication into applications, and for developers to build identity controls into applications, websites, web services, and devices.[

Okta Inc currently has 137 open roles on FindRole.

Listed pay typically runs $174,000–$239,000 across 137 roles with salary data.

Most-posted roles

View all roles at Okta Inc

At a glance

TL;DR · Staff Identity Engineer

As a Staff Identity Engineer on the internal Identity team, you will serve as a technical authority driving the architecture and execution of the organization's identity fabric. You will act as a bridge between internal stakeholders and product teams to lead early adoption of new features while managing the lifecycle, policy design, and federation for enterprise tenants. Your daily work involves building API-based pipelines to automate workflows, enforcing cloud IAM guardrails across AWS, GCP, and Azure, and governing machine identities and service-to-service authentication. You will utilize Okta Identity Engine, Terraform, and Okta Workflows while leveraging protocols like OIDC, OAuth 2.0, SAML 2.0, and FIDO2/WebAuthn. This role solves complex security challenges by securing the foundational trust layer for both human users and autonomous AI workloads within a multi-cloud environment.

What you'll do

  • Lead the early adoption of new features as a technical bridge between internal stakeholders and product teams.
  • Design and implement identity policies, adaptive MFA, and federation protocols for enterprise tenants.
  • Architect and enforce cloud IAM guardrails across AWS, GCP, and Azure environments.
  • Build API-based pipelines to automate complex identity workflows and eliminate systemic inefficiencies.
  • Mentor engineers and serve as the primary authority for reviewing internal IAM designs.
  • Govern the security of AI agents, machine identities, and service-to-service authentication.
  • Ensure identity controls comply with audit requirements such as SOC 2, ISO 27001, and FedRAMP.

What we're looking for

  • You must be a U.S. person (citizen, permanent resident, or protected individual).
  • You must be physically located on U.S. soil.
  • You must have 4+ years of experience designing and maintaining enterprise-scale IAM solutions.
  • You must have deep expertise in the Okta platform, including OIE, Directory Integrations, Workflows, and APIs.
  • You must possess advanced knowledge of OIDC, OAuth 2.0, SAML 2.0, and FIDO2/WebAuthn protocols.
  • You must have experience using Terraform and Okta Workflows to define identity controls as code.
  • You must have experience designing cloud IAM guardrails across AWS, GCP, and Azure environments.
  • U.S. citizen as defined in 42 U.S. Code § 9102.

More like this

Similar roles

Staff Identity Engineer

Okta Inc

Bellevue, WA +2 7 days ago $161,000$221,000
Okta OIDC OAuth 2.0 SAML 2.0 FIDO2 WebAuthn Terraform AWS GCP Azure API SOC 2 ISO 27001 FedRAMP
4+ yrs exp

Staff Identity Governance and Access Engineer

Okta Inc

Bellevue, WA +2 6 days ago $161,000$221,000
Okta IGA PAM ISPM RBAC SAML OIDC OAuth 2.0 SCIM Workday Okta Workflows REST APIs JSON Crowdstrike Falcon Jira ServiceNow SOX SOC 2 ISO 27001 HIPAA GDPR
4+ yrs exp

Staff Identity Governance and Access Engineer

Okta Inc

Bellevue, WA +2 6 days ago $161,000$221,000
Okta IGA PAM ISPM RBAC SAML OIDC OAuth 2.0 SCIM Workday Okta Workflows REST APIs JSON Crowdstrike Falcon Jira ServiceNow SOX SOC 2 ISO 27001 HIPAA GDPR
4+ yrs exp

Cyber Security Identity Staff Engineer

GEICO

Bethesda, MD +3 45 days ago $110,000$230,000
Identity and Access Management Active Directory Kerberos LDAP SAML SCIM OAuth OIDC Privileged Access Management REST APIs micro-services Linux Windows Python Go AWS GCP Azure MITRE CIS NIST
4+ yrs exp

Staff Security Engineer

Micron Technology

Boise, ID 21 days ago
DLP Data Classification Azure AWS GCP Python PowerShell Splunk SIEM SOAR Machine Learning UiPath Copilot Studio SharePoint Regex SaaS Automation
5+ yrs exp

Staff Security Engineer

Twilio

Remote 17 days ago $155,520$194,400
AI Threat Hunting SIEM SOAR Terraform CloudFormation AWS GCP Infrastructure as Code Incident Response Service-Oriented Architecture MITRE ATLAS Automation Security Engineering
Remote