Cybersecurity Jobs at Okta with Visa Sponsorship
Okta's cybersecurity team works across identity security, threat detection, and zero-trust architecture, with roles spanning both technical and strategic functions. Okta has a consistent track record of sponsoring work visas for qualified cybersecurity professionals, making it a strong target if you need sponsorship.
See All Cybersecurity at Okta JobsOverview
Showing 5 of 6+ Cybersecurity Jobs at Okta jobs
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
See all 6+ Cybersecurity Jobs at Okta
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Cybersecurity Jobs at Okta.
Get Access To All JobsINTRODUCTION
Secure Every Identity, from AI to Human
Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence.
This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk.
ABOUT THE JOB
The Identity team’s mission is to strengthen Okta’s position as the leading Identity-as-a-Service solution through identifying and resolving risks to the employees, product, and most importantly, our customers. With the ever-increasing pace of cloud application adoption, companies are struggling to find ways to accurately assess risk and act at the speed of their business.
THE AI IDENTITY ARCHITECT OPPORTUNITY
Reporting to the VP of Identity & Access Management, this role will be an AI Identity Pioneer, not just an IAM expert. Your "been there, done that" experience in securing autonomous agents at scale is your superpower. You’ve seen how traditional OAuth flows break under agentic pressure, you’ve felt the pain of "Secret Zero" in a LangChain loop, and you know exactly where the industry’s current tools fall short. At Okta, you won't just implement security; you will use your battle-tested experience to drive the product features needed to secure the next generation of identities.
The AI Identity Architect's mission is to own Okta’s enterprise identity strategy for autonomous AI agents. As Customer Zero, you will implement Okta on Okta—validating identity patterns at production scale, feeding direct input into product roadmaps, and partnering with business units building internal agentic systems.
WHAT YOU’LL BE DOING
Product Vision & Architecture (The "Ratified R0"):
- Drive the Roadmap: Act as a primary stakeholder for Okta’s product teams. Translate your real-world experience securing agents into prioritized feature requests and product requirements.
- Target State: Define a multi-year roadmap for Non-Human Identities (NHIs) and AI Agents aligned with Zero Trust (NIST 800-207) and Okta’s Secure Identity Commitment.
- Posture First: Use ISPM (Identity Security Posture Management) to discover unmanaged AI agents and eliminate "Identity Debt" across the enterprise.
Cross-App Access & Brokered Delegation:
- Agent-to-App Connectivity: Architect secure Cross-App Access patterns where agents act as intermediaries between enterprise systems.
- Delegated Authority: Refine how user identity is "brokered" to an agent (e.g. OAuth2 Token Exchange), ensuring the agent never has more power than the human user who triggered it.
- Session Scoping: Implement context-bound, short-lived tokens to prevent lateral movement by a compromised agent.
Okta Customer Zero -- Validate and publish patterns using Okta primitives to secure the AI lifecycle for:
- Okta Identity Engine & Auth0: Define how AI agents prove their identity within AuthN/AuthZ core concepts, implementing rigorous protocols for secure access delegation like OAuth2/OIDC, mTLS, and SPIFFE/SPIRE for workload attestation.
- Okta Privilege Access: Implement JIT/JEA access and ephemeral, vaulted secrets for agent tool-use.
- Okta Identity Governance & Workflows: Automate the Joiner-Mover-Leaver (JML) lifecycle for agents, including automated certification and revocation.
- Fine-Grained Authorization: Implement ReBAC for intent-bound decisions (e.g., "Can this agent access the Finance API on behalf of the CFO?").
- Serve as "Customer Zero" by architecting and stress-testing internal AI security frameworks, translating real-world deployment lessons into a continuous stream of public-facing white papers, blogs, and technical guides to steer industry best practices.
AI Ecosystem & Tech Stack Integration -- Define how Okta identity is woven into modern AI orchestration layers:
- Orchestration: Secure identity patterns such as LangChain, LangGraph, AutoGPT, CrewAI, LlamaIndex, and Semantic Kernel.
- Architect secure connectivity to AI model providers such as Azure OpenAI, AWS Bedrock, Google Vertex AI, OpenAI API, and Anthropic.
WHAT YOU’LL BRING TO THE ROLE
- The "Been There" Factor: Proven track record of securing AI agents and non-human identities in a production environment. You have a deep understanding of the "identity gaps" in current AI frameworks.
- Experience: 7+ years in IAM/Security Architecture; proven strategy work across workforce, customer, and Non-Human Identities (NHIs).
- Deep knowledge of the core protocols OAuth2/OIDC (especially Token Exchange), SAML, mTLS, JWT, and Model Context Protocol (MCP).
- Hands-on experience with Modern Identity framework SPIFFE/SPIRE.
- Ability to author Architecture Decision Records (ADR) and influence at the VP/CTO level, while simultaneously acting as a peer to Product Management.
AND EXTRA CREDIT IF YOU HAVE EXPERIENCE IN ANY OF THE FOLLOWING!
- Prior work shaping identity strategy for autonomous/agent systems, multi-agent delegation, or brokered access patterns.
- Exposure to policy-as-code (OPA/Cedar) and service-mesh identity.
- Certifications such as CISSP-ISSAP, CCSP, or TOGAF are welcome but not required or expected.
COMPENSATION
The annual base salary range for this position for candidates located in the San Francisco Bay area is between:
- $242,000
- $332,000 USD
Your actual base salary will depend on factors such as your skills, qualifications, experience, and work location. In addition, Okta offers equity (where applicable), bonus, and benefits, including health, dental and vision insurance, 401(k), flexible spending account, and paid leave (including PTO and parental leave) in accordance with our applicable plans and policies. To learn more about our Total Rewards program please visit: https://rewards.okta.com/us.
THE OKTA EXPERIENCE
- Supporting Your Well-Being
- Driving Social Impact
- Developing Talent and Fostering Connection + Community
We are intentional about connection. Our global community, spanning over 20 offices worldwide, is united by a drive to innovate. Your journey begins with an immersive, in-person onboarding experience designed to accelerate your impact and connect you to our mission and team from day one.
Okta is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, marital status, age, physical or mental disability, or status as a protected veteran. We also consider for employment qualified applicants with arrest and convictions records, consistent with applicable laws.
If reasonable accommodation is needed to complete any part of the job application, interview process, or onboarding please use this Form to request an accommodation.
Notice for New York City Applicants & Employees: Okta may use Automated Employment Decision Tools (AEDT), as defined by New York City Local Law 144, that use artificial intelligence, machine learning, or other automated processes to assist in our recruitment and hiring process. In accordance with NYC Local Law 144, if you are an applicant or employee residing in New York City, please click here to view our full NYC AEDT Notice.
Okta is committed to complying with applicable data privacy and security laws and regulations. For more information, please see our Personnel and Job Candidate Privacy Notice at https://www.okta.com/legal/personnel-policy/.
INTRODUCTION
Secure Every Identity, from AI to Human
Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence.
This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk.
ABOUT THE JOB
The Identity team’s mission is to strengthen Okta’s position as the leading Identity-as-a-Service solution through identifying and resolving risks to the employees, product, and most importantly, our customers. With the ever-increasing pace of cloud application adoption, companies are struggling to find ways to accurately assess risk and act at the speed of their business.
THE AI IDENTITY ARCHITECT OPPORTUNITY
Reporting to the VP of Identity & Access Management, this role will be an AI Identity Pioneer, not just an IAM expert. Your "been there, done that" experience in securing autonomous agents at scale is your superpower. You’ve seen how traditional OAuth flows break under agentic pressure, you’ve felt the pain of "Secret Zero" in a LangChain loop, and you know exactly where the industry’s current tools fall short. At Okta, you won't just implement security; you will use your battle-tested experience to drive the product features needed to secure the next generation of identities.
The AI Identity Architect's mission is to own Okta’s enterprise identity strategy for autonomous AI agents. As Customer Zero, you will implement Okta on Okta—validating identity patterns at production scale, feeding direct input into product roadmaps, and partnering with business units building internal agentic systems.
WHAT YOU’LL BE DOING
Product Vision & Architecture (The "Ratified R0"):
- Drive the Roadmap: Act as a primary stakeholder for Okta’s product teams. Translate your real-world experience securing agents into prioritized feature requests and product requirements.
- Target State: Define a multi-year roadmap for Non-Human Identities (NHIs) and AI Agents aligned with Zero Trust (NIST 800-207) and Okta’s Secure Identity Commitment.
- Posture First: Use ISPM (Identity Security Posture Management) to discover unmanaged AI agents and eliminate "Identity Debt" across the enterprise.
Cross-App Access & Brokered Delegation:
- Agent-to-App Connectivity: Architect secure Cross-App Access patterns where agents act as intermediaries between enterprise systems.
- Delegated Authority: Refine how user identity is "brokered" to an agent (e.g. OAuth2 Token Exchange), ensuring the agent never has more power than the human user who triggered it.
- Session Scoping: Implement context-bound, short-lived tokens to prevent lateral movement by a compromised agent.
Okta Customer Zero -- Validate and publish patterns using Okta primitives to secure the AI lifecycle for:
- Okta Identity Engine & Auth0: Define how AI agents prove their identity within AuthN/AuthZ core concepts, implementing rigorous protocols for secure access delegation like OAuth2/OIDC, mTLS, and SPIFFE/SPIRE for workload attestation.
- Okta Privilege Access: Implement JIT/JEA access and ephemeral, vaulted secrets for agent tool-use.
- Okta Identity Governance & Workflows: Automate the Joiner-Mover-Leaver (JML) lifecycle for agents, including automated certification and revocation.
- Fine-Grained Authorization: Implement ReBAC for intent-bound decisions (e.g., "Can this agent access the Finance API on behalf of the CFO?").
- Serve as "Customer Zero" by architecting and stress-testing internal AI security frameworks, translating real-world deployment lessons into a continuous stream of public-facing white papers, blogs, and technical guides to steer industry best practices.
AI Ecosystem & Tech Stack Integration -- Define how Okta identity is woven into modern AI orchestration layers:
- Orchestration: Secure identity patterns such as LangChain, LangGraph, AutoGPT, CrewAI, LlamaIndex, and Semantic Kernel.
- Architect secure connectivity to AI model providers such as Azure OpenAI, AWS Bedrock, Google Vertex AI, OpenAI API, and Anthropic.
WHAT YOU’LL BRING TO THE ROLE
- The "Been There" Factor: Proven track record of securing AI agents and non-human identities in a production environment. You have a deep understanding of the "identity gaps" in current AI frameworks.
- Experience: 7+ years in IAM/Security Architecture; proven strategy work across workforce, customer, and Non-Human Identities (NHIs).
- Deep knowledge of the core protocols OAuth2/OIDC (especially Token Exchange), SAML, mTLS, JWT, and Model Context Protocol (MCP).
- Hands-on experience with Modern Identity framework SPIFFE/SPIRE.
- Ability to author Architecture Decision Records (ADR) and influence at the VP/CTO level, while simultaneously acting as a peer to Product Management.
AND EXTRA CREDIT IF YOU HAVE EXPERIENCE IN ANY OF THE FOLLOWING!
- Prior work shaping identity strategy for autonomous/agent systems, multi-agent delegation, or brokered access patterns.
- Exposure to policy-as-code (OPA/Cedar) and service-mesh identity.
- Certifications such as CISSP-ISSAP, CCSP, or TOGAF are welcome but not required or expected.
COMPENSATION
The annual base salary range for this position for candidates located in the San Francisco Bay area is between:
- $242,000
- $332,000 USD
Your actual base salary will depend on factors such as your skills, qualifications, experience, and work location. In addition, Okta offers equity (where applicable), bonus, and benefits, including health, dental and vision insurance, 401(k), flexible spending account, and paid leave (including PTO and parental leave) in accordance with our applicable plans and policies. To learn more about our Total Rewards program please visit: https://rewards.okta.com/us.
THE OKTA EXPERIENCE
- Supporting Your Well-Being
- Driving Social Impact
- Developing Talent and Fostering Connection + Community
We are intentional about connection. Our global community, spanning over 20 offices worldwide, is united by a drive to innovate. Your journey begins with an immersive, in-person onboarding experience designed to accelerate your impact and connect you to our mission and team from day one.
Okta is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, marital status, age, physical or mental disability, or status as a protected veteran. We also consider for employment qualified applicants with arrest and convictions records, consistent with applicable laws.
If reasonable accommodation is needed to complete any part of the job application, interview process, or onboarding please use this Form to request an accommodation.
Notice for New York City Applicants & Employees: Okta may use Automated Employment Decision Tools (AEDT), as defined by New York City Local Law 144, that use artificial intelligence, machine learning, or other automated processes to assist in our recruitment and hiring process. In accordance with NYC Local Law 144, if you are an applicant or employee residing in New York City, please click here to view our full NYC AEDT Notice.
Okta is committed to complying with applicable data privacy and security laws and regulations. For more information, please see our Personnel and Job Candidate Privacy Notice at https://www.okta.com/legal/personnel-policy/.
See all 6+ Cybersecurity at Okta jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Cybersecurity at Okta roles.
Get Access To All JobsTips for Finding Cybersecurity Jobs at Okta Jobs
Align Your Credentials to Identity Security
Okta's cybersecurity hiring centers on identity and access management, so certifications like CISSP, CCSP, or vendor-specific credentials in IAM and zero-trust frameworks carry more weight than general security certs when your application hits the hiring team.
Target Roles That Match Your Visa Category
Okta sponsors H-1B, TN, and F-1 OPT across cybersecurity functions, but the visa type affects your timeline. If your OPT expires within six months, prioritize roles where cap-gap protection applies and confirm the team's awareness of your authorization window upfront.
Surface Your Sponsorship Need Early in Recruiting
Okta's recruiting process moves fast. Disclosing your sponsorship requirement during the initial recruiter screen, rather than at the offer stage, prevents late-stage delays and gives the HR team time to loop in their immigration counsel before an offer is drafted.
Prepare for Technical Interviews on Cloud-Native Security
Okta's cybersecurity interviews emphasize cloud security architecture, OAuth and SAML protocols, and threat modeling in SaaS environments. Preparing documentation of past work in these areas strengthens both your interview performance and your eventual H-1B specialty occupation evidence.
Use Migrate Mate to Find Sponsored Cybersecurity Openings
Not every Okta cybersecurity posting makes it easy to confirm sponsorship availability. Use Migrate Mate to browse roles at Okta filtered by visa type so you're targeting openings where sponsorship is confirmed before you invest time in applying.
Cybersecurity at Okta jobs are hiring across the US. Find yours.
Find Cybersecurity at Okta JobsFrequently Asked Questions
Does Okta sponsor H-1B visas for Cybersecurity roles?
Yes, Okta sponsors H-1B visas for cybersecurity positions. Cybersecurity roles at Okta typically qualify as specialty occupations under USCIS criteria given the degree requirements in computer science, information security, or related fields. H-1B sponsorship at Okta covers both new cap-subject petitions and transfers for candidates already holding H-1B status with another employer.
How do I apply for Cybersecurity jobs at Okta?
Apply directly through Okta's careers portal and filter for cybersecurity or security engineering roles. Before applying, confirm that the role lists visa sponsorship as available, since not every posting at a large employer is open to sponsorship. Migrate Mate lets you browse Okta's open cybersecurity positions filtered by visa type so you can identify the right roles before submitting your application.
Which visa types does Okta commonly sponsor for Cybersecurity positions?
Okta sponsors H-1B visas as the primary long-term work authorization path for cybersecurity roles. The company also works with F-1 OPT and CPT for candidates earlier in their career, TN visas for Canadian and Mexican nationals in qualifying cybersecurity job categories, and EB-2 or EB-3 Green Card sponsorship for employees pursuing permanent residency.
What qualifications does Okta expect for Cybersecurity roles requiring sponsorship?
Okta's cybersecurity roles typically require a bachelor's degree or higher in computer science, cybersecurity, or information systems, which also supports the specialty occupation determination required for H-1B sponsorship. Practical experience in identity and access management, cloud security, or threat detection is weighted heavily, and certifications such as CISSP or CCSP strengthen both your candidacy and your visa petition documentation.
How do I plan my timeline if I need Okta to sponsor my H-1B?
USCIS opens H-1B cap registration each March, with a lottery determining selection for that fiscal year's cap of 85,000. If you're not already in H-1B status, you need an offer in place before registration opens. F-1 OPT holders have cap-gap protection if their OPT expires between April and September 30, which covers the gap while your petition is pending. Starting your job search at Okta six to nine months before your current authorization expires gives you realistic runway.
See which Cybersecurity at Okta employers are hiring and sponsoring visas right now.
Search Cybersecurity at Okta Jobs