below marketmost similar roles pay hereabove market
This role pays less than
68%
of similar roles. Most pay
$180,000–$238,250
— the blue band above.
At the midpoint, this role pays about
$191k
versus about
$209k
for comparable roles.
Based on 240 similar postings.
Employer
About Okta Inc
Okta, Inc. is an American identity and access management company based in San Francisco. It provides cloud software that helps companies manage and secure user authentication into applications, and for developers to build identity controls into applications, websites, web services, and devices.[
Okta Inc currently has
103 open roles
on FindRole.
Listed pay typically runs
$174,000–$238,000
across 103 roles with salary data.
The Staff Identity Engineer joins the internal Identity team to serve as a technical authority for the organization's identity fabric. This role involves driving the architecture and execution of internal IAM solutions, specifically championing the Customer Zero philosophy by testing new features before global release. Key responsibilities include owning policy design, adaptive MFA, and federation for enterprise tenants, while building API-based pipelines to automate complex workflows. The engineer will manage cloud IAM guardrails across AWS, GCP, and Azure, and govern AI agents and machine identities. Required expertise includes Okta Identity Engine, OIDC, OAuth 2.0, SAML 2.0, and Terraform. The role addresses the technical challenge of securing non-human, agentic workflows and mitigating session hijacking through continuous access evaluations and phishing-resistant MFA paradigms.
Lead the early adoption of new internal capabilities and provide technical feedback to product teams.
Own the lifecycle, policy design, adaptive MFA, and federation for enterprise Okta tenants.
Architect and enforce cloud IAM guardrails across AWS, GCP, and Azure using API-based pipelines.
Mentor engineers and serve as the primary review authority for IAM designs and technical standards.
Drive automation-first initiatives to ensure identity controls meet SOC 2, ISO 27001, and FedRAMP requirements.
Govern AI agents, machine identities, and service-to-service authentication within the enterprise identity layer.
Establish operational KPIs and translate complex technical milestones into actionable updates for leadership.
What we're looking for
Must have 4+ years of hands-on experience designing, implementing, and maintaining enterprise-scale IAM solutions.
Must have deep expertise in managing enterprise Okta environments, including OIE, Directory Integrations, Advanced Policies, Workflows, and Platform APIs.
Must have advanced expertise in OIDC, OAuth 2.0, SAML 2.0, and phishing-resistant MFA paradigms like FIDO2/WebAuthn.
Must have proven experience defining identity controls as code using Terraform and Okta Workflows.
Must have practical experience designing cloud IAM guardrails across AWS, GCP, and Azure.
Must have a solid background in session lifecycle security, token management, and continuous access evaluations (CAEP/eSSO).
Must have demonstrated experience mentoring engineers and establishing engineering best practices.