Staff Identity Engineer

Okta Inc

Confirmed live yesterday High trust

Quick summary

Work type
On-site
Location
Bellevue, WAChicago, ILWashington, DC
Salary
$161,000–$221,000 / yr
Posted
7 days ago
Freshness
Confirmed live yesterday

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $205k
This role $191k
$151k most similar roles pay here $254k

This role pays less than 61% of similar roles. Most pay $172,500–$238,250 — the shaded band above. At the midpoint, this role pays about $191k versus about $205k for comparable roles.

Based on 240 similar postings.

Employer

About Okta Inc

Okta, Inc. is an American identity and access management company based in San Francisco. It provides cloud software that helps companies manage and secure user authentication into applications, and for developers to build identity controls into applications, websites, web services, and devices.[

Okta Inc currently has 137 open roles on FindRole.

Listed pay typically runs $174,000–$239,000 across 137 roles with salary data.

Most-posted roles

View all roles at Okta Inc

At a glance

TL;DR · Staff Identity Engineer

As a Staff Identity Engineer on the internal Identity team, you will serve as a technical authority driving the architecture and execution of the organization's identity fabric. You will manage the lifecycle, policy design, and adaptive MFA for enterprise tenants while building API-based pipelines to automate complex workflows. Your role involves implementing core protocols like OIDC, OAuth 2.0, and SAML 2.0, alongside phishing-resistant MFA such as FIDO2/WebAuthn. You will utilize Terraform and Okta Workflows to define identity controls as code across AWS, GCP, and Azure environments. The work focuses on securing the foundational trust layer against session hijacking and cookie theft while governing a growing sprawl of non-human, agentic workflows. You will also ensure that all identity controls natively meet compliance requirements including SOC 2, ISO 27001, and FedRAMP standards.

What you'll do

  • Lead the early adoption of new features as a technical bridge between internal stakeholders and product teams.
  • Design and implement identity policies, adaptive MFA, and federation protocols for enterprise tenants.
  • Architect and enforce cloud IAM guardrails across AWS, GCP, and Azure using automated pipelines.
  • Serve as a primary review authority for IAM designs and mentor engineers on technical standards.
  • Automate identity controls to ensure compliance with SOC 2, ISO 27001, and FedRAMP requirements.
  • Govern the security of AI agents, machine identities, and service-to-service authentication.
  • Establish operational KPIs and translate complex technical milestones into updates for leadership.

What we're looking for

  • You must have 4+ years of experience designing, implementing, and maintaining enterprise-scale IAM solutions.
  • You must possess deep expertise in managing complex Okta environments, including OIE, Directory Integrations, Workflows, and Platform APIs.
  • You must have advanced expertise in OIDC, OAuth 2.0, SAML 2.0, and phishing-resistant MFA like FIDO2/WebAuthn.
  • You must have experience defining identity controls as code using Terraform and Okta Workflows.
  • You must have experience designing cloud IAM guardrails across AWS, GCP, and Azure environments.
  • You must have a background in session lifecycle security, token management, and continuous access evaluations (CAEP/eSSO).
  • You must demonstrate experience mentoring engineers and establishing engineering best practices.
  • U.S. citizen as defined in 42 U.S. Code § 9102.

More like this

Similar roles

Staff Identity Engineer

Okta Inc

Bellevue, WA +2 7 days ago $161,000$221,000
Okta OIDC OAuth 2.0 SAML 2.0 FIDO2 WebAuthn Terraform AWS GCP Azure API SOC 2 ISO 27001 FedRAMP
4+ yrs exp

Staff Identity Governance and Access Engineer

Okta Inc

Bellevue, WA +2 6 days ago $161,000$221,000
Okta IGA PAM ISPM RBAC SAML OIDC OAuth 2.0 SCIM Workday Okta Workflows REST APIs JSON Crowdstrike Falcon Jira ServiceNow SOX SOC 2 ISO 27001 HIPAA GDPR
4+ yrs exp

Staff Identity Governance and Access Engineer

Okta Inc

Bellevue, WA +2 6 days ago $161,000$221,000
Okta IGA PAM ISPM RBAC SAML OIDC OAuth 2.0 SCIM Workday Okta Workflows REST APIs JSON Crowdstrike Falcon Jira ServiceNow SOX SOC 2 ISO 27001 HIPAA GDPR
4+ yrs exp

Cyber Security Identity Staff Engineer

GEICO

Bethesda, MD +3 45 days ago $110,000$230,000
Identity and Access Management Active Directory Kerberos LDAP SAML SCIM OAuth OIDC Privileged Access Management REST APIs micro-services Linux Windows Python Go AWS GCP Azure MITRE CIS NIST
4+ yrs exp

Staff Security Engineer

Micron Technology

Boise, ID 21 days ago
DLP Data Classification Azure AWS GCP Python PowerShell Splunk SIEM SOAR Machine Learning UiPath Copilot Studio SharePoint Regex SaaS Automation
5+ yrs exp

Staff Security Engineer

Twilio

Remote 16 days ago $155,520$194,400
AI Threat Hunting SIEM SOAR Terraform CloudFormation AWS GCP Infrastructure as Code Incident Response Service-Oriented Architecture MITRE ATLAS Automation Security Engineering
Remote