Staff Backend Software Engineer, SecureAI

Role overview

Responsibilities

• Shape technical strategy and prioritize work to secure AI agents.
• Build request-time authorization at the Agent Gateway and agent-to-resource connection level.
• Implement policy authoring, schema validation, and evaluation across no-code and API-published policies.
• Validate delegated-agent representation rights and securely forward acting-user identity downstream.
• Shape MCP, OAuth token exchange, and agent identity specifications using production lessons.
• Record authorization outcomes and decision reasons in secure audit logs.
• Advance AI-native software practices and improve CI/CD, observability, documentation, reliability, and support.
• Partner with Product and Design on customer outcomes and mentor peer engineers.

Requirements

• Proven scalable backend architecture and complex API integration experience.
• Strong understanding of web authentication, authorization, and protecting sensitive user data.
• Deep experience building secure, reliable enterprise software in Java or another type-safe language.
• Ability to apply AI across the software development lifecycle and establish team practices.
• Bachelor’s or master’s degree in Computer Science or a related field.

Preferred experience

• Leading engineers through a change in working practices is a strong plus.
• Identity, authorization, or IAM protocols such as OAuth, OIDC, or SAML are extra credit.
• Agent frameworks, AI-facing APIs, or LLM developer toolchains are extra credit.

Compensation

• Annual base salary for candidates located in Canada is CAD 160,000–220,000; equity, bonus, and benefits may also be offered.

Workplace

• The posting includes a hybrid role indicator.
• Okta describes an in-person onboarding experience; this does not establish a regular in-office schedule.