SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Opendoor is building the modern system of homeownership, enabling people to buy and sell homes on their own terms through an end-to-end online experience.
The Security Engineering team builds intelligent systems that protect Opendoor and its customers while enabling engineering velocity, applying software engineering and AI to solve security problems across product, infrastructure, and operations.
In this role, you will own the identity control plane end-to-end, designing and building the platform that decides who gets access to what. You will be the technical authority for workforce identity and access management, working alongside peer specialists covering other enterprise security domains.
Key responsibilities include:
- Design, build, and operate the systems that authenticate and authorize every employee and contractor
- Own passwordless authentication (passkeys) rollout across the workforce
- Define enrollment rules for authentication methods by population and set assurance bars
- Design authenticator assurance tiers and tune session policy (lifetime, idle timeout, step-up re-authentication) scaled to access risk
- Build per-application authentication policies weighing device posture, network context, and risk signals to determine when phishing-resistant factors or re-authentication are required
- Own the non-human identity inventory: service accounts, API keys, and workload identities with short-lived, federated credentials and automatic expiry
- Treat AI agents as their own identity class with scoped, single-use credentials per action and granular audit trails
- Manage identity configuration as code through pull requests for easy reversibility
- Build first-party tooling extending commercial identity platforms: lifecycle automation, access governance, provisioning, and custom integrations
- Own technical direction for identity and contribute to the broader security engineering roadmap
- Feed high-fidelity identity telemetry and auth events into detection and response pipelines; support incident response
- Establish secure-by-default standards for new SaaS and AI tools at the identity layer
- Mentor engineers across security and IT on identity engineering patterns and build automation others can build on
The role is in-person four days per week at the Toronto office.
REQUIREMENTS:
- Deep conviction that AI and automation should eliminate manual work, with proven track record building agentic systems
- Designed, built, and operated a workforce identity platform at enterprise scale with deep hands-on Okta engineering expertise: building automation and API-driven integrations
- Shipped a passkey rollout on Okta at enterprise scale; knows where WebAuthn and FIDO2 adoption breaks in the real world and how to fix it
- Manages identity infrastructure as code: writes and reviews Terraform or equivalent IaC tool for identity systems; ships changes through pull requests
- Strong software engineering ability in Python, Go, or TypeScript, building first-party tooling and API-driven automation on top of identity platforms
- Identity-first mindset: SSO, SAML, OIDC, SCIM provisioning, conditional access, and least privilege applied at scale across employees and contractors
- High autonomy; sets roadmap and path forward in ambiguous territory and personally executes
- Business-enablement mindset; success measured by adoption and impact
- Humility and curiosity; builds guardrails and automation that make it easier for other teams to move fast securely
NICE TO HAVE:
- Hands-on Google Workspace administration and automation (Admin SDK, directory sync, DLP) alongside Okta
- Experience tying device trust or posture signals to access decisions; identity-aware proxy patterns
- SOC 2 or SOX access-control evidence experience
- Contributions to open source identity tooling or the Okta Terraform provider ecosystem
Tech stack: Okta, Okta Workflows, Google Workspace, Terraform, Python, Go, TypeScript, GitHub, WebAuthn, FIDO2, SAML, OIDC, SCIM, Datadog, AI tooling (OpenAI, Anthropic).
