Your browser does not support javascript! Please enable it, otherwise web will not work for you.

Staff/Principal Identity Engineer

Home > Python programming jobs

Staff/Principal Identity Engineer in USA

  • Legora AB
  • Full time
  • Email
  • New York, NY

Responsibilities

  • Own the Okta platform roadmap, architecture, configuration, integrations, security posture, change management, and operational reliability.
  • Design and troubleshoot SSO, SAML, OIDC, OAuth, and SCIM integrations, authentication policies, MFA, session controls, and device-aware access.
  • Build identity lifecycle, provisioning, deprovisioning, access review, least-privilege, privileged-access, and application-ownership controls.
  • Develop production automation using Python, JavaScript, Okta APIs, Workflows, Terraform, and infrastructure-as-code practices.
  • Establish governance and authorization controls for service accounts, API tokens, integrations, AI agents, and MCP access.
  • Serve as the final technical escalation point for complex Okta issues and remain accountable for production outcomes.

Requirements

  • Expert-level, hands-on ownership of an enterprise Okta environment, including architecture, integrations, lifecycle management, authentication policies, governance, and production troubleshooting.
  • Typically 8–10+ years of relevant experience in identity engineering, IT infrastructure, or corporate security, although the posting states there is no fixed years-of-experience minimum.
  • Deep understanding of SAML, OIDC, OAuth, SCIM, federation, authentication, and authorization.
  • Demonstrated production engineering experience with Python and/or JavaScript, APIs, and Terraform or equivalent infrastructure-as-code tools.
  • Experience delivering corporate security controls across SaaS applications, endpoints, device trust, and data protection.
  • Ability to define technical roadmaps, lead complex cross-team work, make security decisions, and own production results.
  • Experience with HR-driven identity modernization, Workday integrations, directory consolidation, identity governance, privileged access, non-human identity, AI-agent or MCP security, or Okta certifications is useful but not required.

Benefits

  • Comprehensive salary and benefits package with medical, dental, and vision coverage.
  • Medical plan options through Aetna and Kaiser Permanente, plus HSA or Healthcare FSA options.
  • Dental plans through MetLife and vision coverage through Vision Care.
  • Generous parental leave, Maven Clinic access, Dependent Care FSA, and One Medical membership for employees and dependents.
  • Pre-tax commuter benefits, life insurance, short-term and long-term disability coverage, and a 401(k) with company match.
  • Unlimited PTO and voluntary benefits including identity protection, legal coverage, and pet savings programs.
  • Global collaboration across Europe, APAC, and North America.
  • In-person work at the Union Square office with company-provided lunch daily.

Salary: $216k - $292k/yr

Legora AB

Legora builds an AI-powered collaborative workspace for legal professionals, used by law firms and in-house legal teams to draft, review, and manage matters. It sells enterprise SaaS to senior legal decision-makers, focusing on precision and speed for complex workflows. Founded in 2023 and headqu...

Similar positions

Software Engineer

  • Pomelo
  • Contract
  • USA
  • 11/06/2026
  • Salary: Competitive
  • Remote

Staff Machine Learning Engineer - Risk

  • Gusto
  • Full time
  • USA
  • 11/06/2026
  • Salary: $227k - $284k/yr
  • San Francisco, CA

Software Engineer: Robotics Controls

  • Generalist
  • Full time
  • USA
  • 11/06/2026
  • Salary: $200k - $350k/yr
  • Boston, MA

Senior Engineer - PAM

  • Prudential plc
  • Full time
  • Others
  • 11/06/2026
  • Bengaluru, India

AI Enablement Engineer

  • Revalize
  • Full time
  • Remote
  • 11/06/2026
  • Salary: Competitive
  • United States