Lead Platform Engineer, Identity & Access
New
W
WebflowWeb marketing
Remote-first (United States)Full-TimeLead
SalaryZone A: $232,000 - 290,000; Zone B: $217,600 - 272,000; Zone C: $204,800 - 256,000
Apply NowOpens the employer's application page
Job Details
- Experience
- Minimum of 8 years in identity, platform, or infrastructure engineering
- Required Skills
- PythonJavascriptTerraform
Requirements
- Have at least 8 years of identity, platform, or infrastructure engineering experience.
- Have owned a workforce identity platform at meaningful scale.
- Bring hands-on experience architecting an enterprise identity provider; Okta is strongly preferred.
- Be fluent in SAML, OIDC, OAuth 2.0, and SCIM, including debugging at the token and assertion level.
- Have identity governance experience, including RBAC design, HRIS-driven lifecycle automation, and meeting audit requirements.
- Have a strong grounding in Zero Trust, identity-based attacks, device trust, and non-human identity security.
- Have scripting ability in Python, JavaScript, or a similar language.
- Have infrastructure as code experience, such as Terraform.
- Communicate clearly with senior and executive audiences and drive architecture decisions.
- Nice to have: experience governing identities for AI tools and agents, and Okta certifications.
Responsibilities
- Own the workforce identity architecture and roadmap, using Okta as the core platform and making build-versus-buy decisions.
- Establish Okta configuration standards, hardening, change control, and configuration as code using Terraform, APIs, Okta Workflows, or scripts.
- Automate the identity lifecycle from joiner to leaver using the HRIS as the source of truth and SCIM for downstream applications.
- Build application onboarding patterns, including SSO standards, provisioning templates, and federated access to cloud and source control platforms.
- Design RBAC, least-privilege access, request and approval workflows, access reviews, and automated audit evidence.
- Strengthen access controls with phishing-resistant MFA, device trust, risk signals, and governance of non-human identities.
- Stream identity telemetry to Security and serve as the primary responder for identity incidents and outages, including on-call coverage, post-incident reviews, and log analysis.
- Manage the Okta vendor relationship, licensing, and cost.
View Full Description & ApplyYou'll be redirected to the employer's site
