AI Identity Architect

Okta • San Francisco, CA

4d • Hybrid

About The Position

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. The Identity Team The Identity team’s mission is to strengthen Okta’s position as the leading Identity-as-a- Service solution through identifying and resolving risks to the employees, product, and most importantly, our customers. With the ever-increasing pace of cloud application adoption, companies are struggling to find ways to accurately assess risk and act at the speed of their business. The AI Identity Architect Opportunity Reporting to the VP of Identity & Access Management, this role will be an AI Identity Pioneer, not just an IAM expert. Your "been there, done that" experience in securing autonomous agents at scale is your superpower. You’ve seen how traditional OAuth flows break under agentic pressure, you’ve felt the pain of "Secret Zero" in a LangChain loop, and you know exactly where the industry’s current tools fall short. At Okta, you won't just implement security; you will use your battle-tested experience to drive the product features needed to secure the next generation of identities. The AI Identity Architect's mission is to own Okta’s enterprise identity strategy for autonomous AI agents. As Customer Zero, you will implement Okta on Okta—validating identity patterns at production scale, feeding direct input into product roadmaps, and partnering with business units building internal agentic systems.

Requirements

• The "Been There" Factor: Proven track record of securing AI agents and non-human identities in a production environment. You have a deep understanding of the "identity gaps" in current AI frameworks.
• Experience: 7+ years in IAM/Security Architecture; proven strategy work across workforce, customer, and Non-Human Identities (NHIs).
• Deep knowledge of the core protocols OAuth2/OIDC (especially Token Exchange), SAML, mTLS, JWT, and Model Context Protocol (MCP).
• Hands-on experience with Modern Identity framework SPIFFE/SPIRE.
• Ability to author Architecture Decision Records (ADR) and influence at the VP/CTO level, while simultaneously acting as a peer to Product Management.

Nice To Haves

• Prior work shaping identity strategy for autonomous/agent systems, multi-agent delegation, or brokered access patterns.
• Exposure to policy-as-code (OPA/Cedar) and service-mesh identity.
• Certifications such as CISSP-ISSAP, CCSP, or TOGAF are welcome but not required or expected.

Responsibilities

• Product Vision & Architecture (The "Ratified R0") Drive the Roadmap: Act as a primary stakeholder for Okta’s product teams. Translate your real-world experience securing agents into prioritized feature requests and product requirements.
• Target State: Define a multi-year roadmap for Non-Human Identities (NHIs) and AI Agents aligned with Zero Trust (NIST 800-207) and Okta’s Secure Identity Commitment.
• Posture First: Use ISPM (Identity Security Posture Management) to discover unmanaged AI agents and eliminate "Identity Debt" across the enterprise.
• Agent-to-App Connectivity: Architect secure Cross-App Access patterns where agents act as intermediaries between enterprise systems.
• Delegated Authority: Refine how user identity is "brokered" to an agent (e.g. OAuth2 Token Exchange), ensuring the agent never has more power than the human user who triggered it.
• Session Scoping: Implement context-bound, short-lived tokens to prevent lateral movement by a compromised agent.
• Okta Identity Engine & Auth0: Define how AI agents prove their identity within AuthN/AuthZ core concepts, implementing rigorous protocols for secure access delegation like OAuth2/OIDC, mTLS, and SPIFFE/SPIRE for workload attestation.
• Okta Privilege Access: Implement JIT/JEA access and ephemeral, vaulted secrets for agent tool-use.
• Okta Identity Governance & Workflows: Automate the Joiner-Mover-Leaver (JML) lifecycle for agents, including automated certification and revocation.
• Fine-Grained Authorization: Implement ReBAC for intent-bound decisions (e.g., "Can this agent access the Finance API on behalf of the CFO?").
• Serve as "Customer Zero" by architecting and stress-testing internal AI security frameworks, translating real-world deployment lessons into a continuous stream of public-facing white papers, blogs, and technical guides to steer industry best practices.
• Orchestration: Secure identity patterns such as LangChain, LangGraph, AutoGPT, CrewAI, LlamaIndex, and Semantic Kernel.
• Architect secure connectivity to AI model providers such as Azure OpenAI, AWS Bedrock, Google Vertex AI, OpenAI API, and Anthropic.

Benefits

• Okta offers equity (where applicable), bonus, and benefits, including health, dental and vision insurance, 401(k), flexible spending account, and paid leave (including PTO and parental leave) in accordance with our applicable plans and policies.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed
• Number of Employees: 1,001-5,000 employees