SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Okta is hiring a Staff Fullstack Engineer to join the Okta Secures AI team, which is building the industry's first Identity Security Fabric for the agentic era. The team is focused on solving a critical challenge: as organizations rapidly deploy AI agents with access to critical tools, they're creating a 'Shadow AI' crisis. Your mission is to architect the unified control plane that moves identity from reactive gatekeeper to proactive security infrastructure.
You will lead the technical implementation of a four-pillar maturity model—Discover, Onboard, Protect, and Govern—to provide enterprise-grade visibility and governance for both human and non-human identities. This includes architecting solutions for agent discovery, secure access enforcement via Agent Gateways, short-lived credentials, and least-privilege access patterns. You'll work on distributed systems that scale securely, with deep expertise in backend architecture, API integration, and web authentication fundamentals.
Key responsibilities include: shaping technical strategy around open standards like IPSIE; governing and monitoring agentic behavior across fullstack ecosystems; architecting systems that discover and secure all agents including shadow AI assets; driving adoption of AI-native development practices across the team; identifying and prioritizing technical debt; and partnering with Product and Design to own customer outcomes. You'll also actively mentor peer engineers and raise the technical bar of the team.
You should operate well beyond basic AI tool usage—understanding how to apply AI meaningfully across the full software development lifecycle, evaluate and adopt new AI tooling with good judgment, and establish practices that bring teams along. You'll need proven experience defining scalable backend architectures, integrating complex APIs with modern web technologies, and making architectural decisions with lasting org-wide impact. A solid understanding of web authentication, authorization flows, and best practices for securing sensitive data is essential.
