Staff Identity Governance and Access Engineer
Okta · Bellevue, Washington; Chicago, Illinois; Washington, DC
About this role
**Staff Identity Governance and Access Engineer** **About the Role** Join Okta's Identity Governance and Access Security team as a Staff Identity Security Engineer. This senior individual-contributor role offers deep technical ownership of Okta Identity Governance (OIG), Okta Privileged Access (OPA), and Identity Security Posture Management (ISPM) implementations. You'll set technical direction, mentor engineers, and drive identity security initiatives from concept to production. **Key Responsibilities** • Own OIG architecture end-to-end—design access request workflows, entitlement structures, and certification campaigns • Lead lifecycle, birthright, and RBAC strategy across the enterprise • Drive Workday integration architecture balancing scheduled reconciliation with real-time sync • Design and harden mover/leaver automation with attribute-driven group re-evaluation • Lead OPA, ISPM, and Zero Standing Privilege initiatives including JIT elevation and break-glass access • Own PAM and ISPM telemetry, KPIs, and operational metrics • Build and maintain Okta Workflows automation for access requests and remediation • Mentor engineers, review designs, and communicate technical updates to leadership **Required Experience** • 4+ years of direct, advanced experience with enterprise IGA, PAM/ISPM tools • Hands-on experience designing and deploying Birthright Provisioning and RBAC in production • Production experience with OPA or equivalent PAM tooling (Zero Standing Privilege, JIT access, break-glass design) • Production experience with ISPM tools integrated with EDR solutions • Solid grounding in identity standards (SAML, OIDC, OAuth 2.0, SCIM) • Track record owning identity lifecycle designs (joiner/mover/leaver) end-to-end • Experience in SOX and compliance-critical environments • Independent work style with strong executive communication skills **Nice to Have** • Experience governing non-human identities and scaling access certification programs • ServiceNow and JIRA integration experience • Okta certifications (Administrator, Consultant, or Workflows Specialist) • REST API, JSON, webhooks, and Workday-to-IdP integration experience • Multi-framework compliance audit support (SOC 2, ISO 27001, HIPAA, GDPR) **Requirements** • U.S. soil status and U.S. person status required (citizens, permanent residents, nationals, refugees, asylees) • Note: Working on a U.S. visa does NOT qualify **Compensation** Annual base salary range (CA, CO, IL, NY, WA): $161,000–$221,000 USD Plus equity, bonus, and comprehensive benefits including health/dental/vision, 401(k), and paid leave.
Listing freshness
CronJobs last confirmed this listing 23h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.