Manager, Customer Identity, Security Engineering

Job description

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. Manager, Customer Identity, Security Engineering Get to know Okta Okta is The World’s Identity Company. We free everyone to safely use any technology—anywhere, on any device or app. Our Workforce and Customer Identity Clouds enable secure yet flexible access, authentication, and automation that transforms how people move through the digital world, putting Identity at the heart of business security and growth. At Okta, we celebrate a variety of perspectives and experiences. We are not looking for someone who checks every single box - we’re looking for lifelong learners and people who can make us better with their unique experiences. Join our team! We’re building a world where Identity belongs to you. The Role We seek a technical, hands-on Security Engineering Manager to build and lead a security engineering team within Auth0 Customer Identity that secures how we build and use AI. The team's work spans two areas. The first is building security tooling and controls for AI, including gateways and guardrails that secure the use of MCP servers, LLMs, agents, and the systems around them. The second is architecting and reviewing the security of our AI products, working shift-left with engineering and product teams so that security is built in from the start of design instead of added afterward. This role leads a single team embedded within the Customer Identity product unit and works across Product, Engineering, and the broader Okta Security organization to turn AI security guidance into shipped controls, supporting the growth of our global Customer Identity business. We are an engineering-focused organization that seeks to stay on the cutting edge of security technology and the AI threat landscape. In this role you will set direction for a team that doesn't just advise on AI risk — it builds the gateway, guardrails, and tooling that enforce secure AI usage, and reviews AI systems early enough to shape their design. You will lead a globally distributed group of talented engineers who share a passion for security and enjoy solving complex problems at scale. This role works closely with and alongside the broader Okta Security team in support of Okta's company-wide security strategy and Okta’s Secure Identity Commitment . This is a player-coach role. You will stay hands-on: designing and prototyping, writing and reviewing code, challenging architectures, and earning the respect of strong engineers, while also hiring, growing, and retaining your team and shaping its roadmap. Responsibilities: • Hire, lead, coach, and develop a globally distributed team of security engineers (Senior through Staff), building a culture of technical excellence, ownership, and pragmatic security • Define and execute a multi-quarter roadmap for the team, aligned with Customer Identity business goals and Okta's company-wide security strategy, balancing gateway engineering with security review demand • Lead the design and delivery of an internal AI gateway that secures internal AI traffic — including agent, MCP, and LLM access — with authentication and authorization, policy enforcement, guardrails, auditing, and observability • Be hands-on in the team's technical work: contribute to architecture, prototypes, and code, and set the engineering bar for the team • Run an AI security review practice, similar to product security, that assesses AI-enabled features, services, models, and agent/MCP integrations through intake, threat modeling, design review, and actionable remediation guidance • Review and build security controls for AI systems, addressing risks such as prompt injection, insecure tool and agent permissions, data leakage, excessive agency, model