Staff Software Engineer, Agent Gateway
Okta · San Francisco, California
About this role
**Staff Software Engineer, Agent Gateway** **About the Role** Okta is seeking a Staff Software Engineer to serve as a technical anchor for the Agent Gateway team. You'll own critical parts of the data and control planes, driving architectural design as MCP and agent identity specs evolve. This role sits at the intersection of product, security, and infrastructure. **What You'll Do** • Architect and lead end-to-end design of major gateway capabilities, from virtual MCP server aggregation to Agent-to-Agent brokered delegation • Design for security and runtime—set standards for credential handling, tokens, tenant isolation, and audit logging • Track and shape MCP, OAuth token exchange, and agent identity specifications • Ship with agentic tooling—treat Claude, Claude Code, and MCP-connected agents as first-class parts of your workflow • Raise the bar on code review, testing standards, incident retrospectives, and design doc culture **What You'll Bring** • 7+ years building distributed, highly available production backend systems • Hands-on experience shipping production services in Java and/or Go • Strong grounding in OAuth 2.0, OIDC, and RFC 8693 token exchange • Proven success shipping identity, authorization, or edge-of-network services at scale • Working fluency with agentic development tools (Claude Code, MCP servers, AI-assisted code review) • Direct communication style and talent for writing strong technical design docs **Extra Credit** • Experience building or operating an MCP server, agent framework, or LLM-facing gateway in production • Prior work on multi-tenant SaaS platforms at Okta or equivalent enterprise identity provider • Active contributions to standards work in agent identity space **Compensation & Location** San Francisco Bay Area: $194,000–$267,000 USD (base salary) Hybrid role | Equity, bonus, and comprehensive benefits included
Listing freshness
CronJobs last confirmed this listing 1d ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.