{bc}
Apply
indeed

Staff Software Engineer, SecureAI

Okta
Toronto, CAN
Hybrid
Discovered 3 weeks ago
Backend software engineeringDistributed systemsScalable backend architectureJavaType-safe programming languagesAuthentication and authorization

Full Job Posting

Role overview

The Staff Software Engineer joins Okta's SecureAI team to build an Identity Security Fabric for AI agents and develop secure, interoperable, scalable access infrastructure.

The role designs, builds, and maintains backend services and applies AI-augmented workflows to software design, validation, and delivery.

The team focuses on agent identity, including discovery, onboarding, protection, governance, and support for protocols such as MCP.

Engineering and policy authorization

  • Shape technical strategy and prioritize work to secure AI agents.
  • Build a Runtime Policy Decision Point and request-time authorization engine at the Agent Gateway and agent-to-resource connection level.
  • Evaluate agent requests against per-agent, per-tool, and per-resource rules; support policy authoring, schema validation, and evaluation.
  • Validate delegated-agent user representation and securely forward acting-user identity to downstream resources.
  • Develop audit logging of each allow or deny decision and its corresponding rule or reason.

Specifications and engineering practices

  • Track and shape MCP, OAuth token exchange, and agent identity specifications; contribute production lessons to specifications and reference implementations.
  • Advance AI-native software development practices across design, review, and delivery.
  • Identify technical debt and drive improvements in CI/CD, observability, documentation, reliability, and support processes.
  • Partner with Product and Design on customer outcomes and invest in peer engineers' growth and team technical standards.

Qualifications

  • Experience defining scalable backend architectures and integrating complex APIs with modern web technologies.
  • Ability to make and defend architectural decisions with lasting organizational impact.
  • Strong understanding of web authentication and authorization, including secure handling of sensitive user data.
  • Deep expertise building reliable, secure, enterprise-grade software in Java or another type-safe language.
  • Ability to apply AI across the software development lifecycle, assess AI tools, and establish team practices.
  • Bachelor's or master's degree in Computer Science or a related field.
  • Leading engineers through a change in AI adoption, developer tooling, or engineering culture is a strong plus.
  • Identity, authorization, or IAM protocol experience (OAuth, OIDC, or SAML) and experience with agent frameworks, AI-facing APIs, or LLM developer tools are extra credit.

Workplace

  • The posting includes the hybrid-work designation #LI-Hybrid.

About Okta

Okta builds identity and access infrastructure intended to help organizations use AI securely.

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Sarah M.James T.Maya R.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More from this employer

More jobs at Okta

Senior Technical Writer (Toronto)

Toronto, CAN

Discovered Today

Senior Technical Consultant, Okta

Washington, USA

Discovered 2 days ago

Senior Software Engineer (Core Frontier)

Bengaluru, IND

Discovered 2 days ago

Solutions Engineer, Okta (Enterprise West)

Bellevue, USA

Discovered 2 days ago

Senior Technology Specialist, Executive Support

San Francisco, USA

Discovered 2 days ago

Sr. Software Engineer, AI Platform & Infrastructure

San Francisco, USA

Discovered 2 days ago

Sr. Customer Success Manager

Toronto, CAN

Discovered 2 days ago

Technical Content Manager

Chicago, USA

Discovered 2 days ago