INTRODUCTION

Secure Every Identity, from AI to Human

Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence.

This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk.

About Okta for AI Agents

Okta secures access for 20,000 organizations and billions of users. Okta for AI Agents extends that work to the agentic shift. Deploying an AI agent is not like deploying traditional software. You are putting professional work output into production, and it needs deep integration, continuous tuning, and change management. Every agent needs an identity, a scope, an audit trail, and a way to be shut down when it goes wrong. Most enterprises have not built this yet. We are.

We hire builders who see the cracks in enterprise agent identity that everyone else has learned to live with, and we hire leaders who can turn a handful of those builders into a function.

THE ROLE

You build and lead the Forward Deployed Engineering team for Okta for AI Agents. Your engineers embed inside Okta’s most strategic enterprise customers and own the technical outcome for agent identity from prototype to production. You own the team that makes those deployments succeed, the engagement model behind them, and the loop that turns what the field learns into Okta’s product.

You are a player-coach in the truest sense. You lead a team of five Senior and Principal Forward Deployed Engineers, and you carry your own delivery alongside them: you personally own the agent identity outcome in one of our most strategic accounts, hands-on in the IDE and in the architecture room. You are the role model for the role, the bar your engineers measure themselves against in technical craft and in how they show up with customers, and you are judged both by what you ship yourself and by how far your team goes.

Responsibilities

• Build and lead the team. Hire, onboard, and develop a team of five Senior and Principal Forward Deployed Engineers. Set the bar for the role, protect it, and build the career paths that keep elite engineers in the field.
• Deliver hands-on yourself. Personally own agent identity delivery in one strategic account: write production code, own the architecture and the kill-switch design, and pass the security review. You lead from inside the work, not above it.
• Be the role model. Set the standard the team builds to, in engineering craft, in customer trust, and in how the hardest accounts get handled. Your engineers learn the role by watching how you do it.
• Own the engagement model. Define how FDEs embed in strategic accounts, how engagements are scoped, and how agents move from prototype to production with full identity coverage and a clean security review.
• Be accountable for field outcomes. Across the team’s portfolio of strategic accounts: agents in production, security reviews passed, AI governance requirements met, and posture and inventory visibility online.
• Run the field-to-product loop. Aggregate the recurring agent identity gaps the team finds in the field and turn them into prioritized, well-formed input to the O4AA roadmap with product and engineering leadership.
• Coach on the hard accounts. Step into the toughest technical and political situations alongside your engineers, and help them navigate architecture review boards, security councils, and CISO conversations.
• Partner across go-to-market. Work with sales, solutions engineering, customer success, and professional services so FDE engagements land cleanly and scale across the customer base.
• Represent the function to senior leadership. Brief CISO, CIO, and Chief AI Officer audiences on agent security posture, and translate agent risk into terms the business acts on.
• Operate the team. Plan capacity across accounts, manage travel and on-call load so the team is not run into the ground, and track the metrics that show the function is working.

Requirements

• Leadership track record. 3+ years managing engineers or technical field teams (forward deployed, solutions engineering, professional services, or platform), with a record of hiring and growing senior technical talent.
• Ability to travel 35% (on occasion internationally)
• Still a builder. A background shipping production software and the current depth to deliver hands-on yourself: review and write agent identity code, own an architecture, and earn a principal engineer’s respect.
• Identity and agent security fluency. Working command of OAuth 2.0, OIDC, RFC 8693 token exchange, and the agentic identity problem: delegation versus impersonation, MCP, and fine-grained authorization.
• Field and customer experience. You have personally delivered or led complex technical engagements inside enterprise customers, and you are steady when account politics get sharp.
• Customer-facing range. Comfortable in a customer standup and a CISO briefing on the same day, credible with both senior engineers and executives.
• Cross-functional operator. You work well with sales, product, and engineering leadership, and you turn field signal into roadmap influence.
• High agency, builder’s mindset. Comfortable standing up a new function in an ambiguous, fast-moving space, and owning outcomes end to end.

LI-Hybrid

(P25260_3456774)

COMPENSATION

• The OTE range for this position for candidates located in the San Francisco Bay area is between: $282,000—$388,000 USD

Below is the annual On Target Compensation (OTE) range for candidates located in California (excluding San Francisco Bay Area), Colorado, Illinois, New York and Washington. Your actual OTE, which is inclusive of base salary and incentive compensation, will depend on factors such as your skills, qualifications, experience, and work location. In addition, Okta offers equity (where applicable) and benefits, including health, dental and vision insurance, 401(k), flexible spending account, and paid leave (including PTO and parental leave) in accordance with our applicable plans and policies.

The annual OTE range for this position for candidates located in California (excluding San Francisco Bay Area), Colorado, Illinois, New York, and Washington is between: $252,000—$346,500 USD

The Okta Experience

• Supporting Your Well-Being
• Driving Social Impact
• Developing Talent and Fostering Connection + Community

We are intentional about connection. Our global community, spanning over 20 offices worldwide, is united by a drive to innovate. Your journey begins with an immersive, in-person onboarding experience designed to accelerate your impact and connect you to our mission and team from day one.

Okta is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, marital status, age, physical or mental disability, or status as a protected veteran. We also consider for employment qualified applicants with arrest and convictions records, consistent with applicable laws.

If reasonable accommodation is needed to complete any part of the job application, interview process, or onboarding please use this Form to request an accommodation.

Notice for New York City Applicants & Employees: Okta may use Automated Employment Decision Tools (AEDT), as defined by New York City Local Law 144, that use artificial intelligence, machine learning, or other automated processes to assist in our recruitment and hiring process. In accordance with NYC Local Law 144, if you are an applicant or employee residing in New York City, please

Okta is committed to complying with applicable data privacy and security laws and regulations. For more information, please see our Personnel and Job Candidate Privacy Notice.

Okta
The foundation for secure connections between people and technology
Okta is the leading independent provider of identity for the enterprise. The Okta Identity Cloud enables organizations to securely connect the right people to the right technologies at the right time. With over 7,000 pre-built integrations to applications and infrastructure providers, Okta customers can easily and securely use the best technologies for their business. More than 19,300 organizations, including JetBlue, Nordstrom, Slack, T-Mobile, Takeda, Teach for America, and Twilio, trust Okta to help protect the identities of their workforces and customers.