Staff Software Engineer

Okta secures AI by building trusted, neutral infrastructure that enables organizations to safely embrace AI. The Okta for AI Agents Team is building the future of digital identity management.

• Proactively shape the technical strategy of the Identity Security Fabric, partnering with leadership to prioritize work streams for securing AI Agents.
• Build the Runtime Policy Decision Point (PDP). Implement the request-time authorization engine at the Agent Gateway and at the agent to resource connection level.
• Design and support authoring from a policy engine like Cedar, schema validation, and evaluation.
• Develop logic to validate which users a delegated agent is permitted to represent and securely forward the acting user's identity to downstream resources.
• Track and shape MCP, OAuth token exchange, and agent identity specifications.
• Develop comprehensive audit logging mechanisms.
• Drive continual evolution in the adoption of AI-native development practices.
• Proactively identify and prioritize tech debt; drive improvements in CI/CD, observability, documentation, reliability, and support processes.
• Partner with Product and Design to understand and own the desired customer outcome.
• Actively invest in the growth of peer engineers.

• Operates well beyond basic AI tool usage - understands how to apply AI meaningfully across the full software development lifecycle.
• Proven experience defining scalable backend architectures and integrating complex APIs with modern web technologies.
• Solid understanding of web authentication and authorization fundamentals.
• Architectural expertise: Proven experience defining scalable backend architectures and integrating complex APIs with modern web technologies.
• Backend proficiency: Deep expertise in building reliable, secure, enterprise-grade software in Java or another type-safe language.
• Prior experience leading a team of engineers through a meaningful shift in ways of working is a strong plus.

• Location: Toronto, Ontario, Canada.