SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: CAD 136,000 - 187,000 / annual
Okta is seeking a Senior Software Engineer to build the Agent Gateway, a critical identity-aware infrastructure layer that connects enterprise AI agents to authorized tools, data, and services. The Agent Gateway team owns the infrastructure that enforces authorization, isolates credentials, mints tokens, and produces audit trails for agent traffic from Claude, Agentforce, Codex, and internal agents.
You will own features and components across the data and control planes, turning technical designs and product requirements into reliable production systems. This is a hands-on role at the intersection of product, security, and infrastructure, where you will ship services that handle agentic traffic reliably and performantly at scale.
Key responsibilities include:
- Own end-to-end implementation of gateway features, from virtual MCP server aggregation to token exchange and policy evaluation, with tests, observability, and operational readiness built in
- Write code that handles credentials, tokens, tenant isolation, and audit logging in the critical path for customer agent traffic
- Read and implement MCP, OAuth token exchange, and agent identity specifications, feeding production lessons back into designs
- Use Claude, Claude Code, and MCP-connected agents as everyday tools across design, code generation, code review, and operations
- Participate in code review, testing, incident response, and design-doc culture to raise the team's engineering bar
The team is early in a rapidly evolving space. Standards for agent identity (MCP, OAuth token exchange, DCR) are being built in real time. The roadmap includes hardening the data plane for on-premises deployments, extending policy semantics beyond tool-level allowlists, adding native support for Agent-to-Agent brokered delegation, and scaling to tenants with thousands of virtual MCP servers.
Requirements:
- 4+ years building production backend systems, ideally distributed and highly available
- Proficiency shipping production services in Java and/or Go
- Working knowledge of OAuth 2.0 and OIDC, and comfort reading and implementing spec-driven code (RFC 8693 token exchange is a plus)
- Hands-on experience with service rollouts, feature flags, observability, and incident response
- Working familiarity with agentic development tools (e.g., Claude Code, MCP servers, AI-assisted code review)
- Clear written and verbal communication, and ability to collaborate across data plane services and larger identity control plane
Extra credit for: experience building or integrating with MCP servers, agent frameworks, or LLM-facing gateways; multi-tenant SaaS platform experience; exposure to identity, authorization, or edge-of-network services; active participation in standards work (MCP, OAuth, GNAP, DCR); full-stack or frontend experience for gateway admin and configuration surfaces.
