Your browser does not support javascript! Please enable it, otherwise web will not work for you.

Staff/Principal Identity Engineer

Home > Python programming jobs

Staff/Principal Identity Engineer in USA

  • Legora AB
  • Full time
  • Email
  • New York, NY

Responsibilities

  • Own the Okta platform roadmap, architecture, configuration, integrations, security posture, change management, and operational reliability.
  • Design and troubleshoot SSO, SAML, OIDC, OAuth, and SCIM integrations, authentication policies, MFA, session controls, and device-aware access.
  • Build identity lifecycle, provisioning, deprovisioning, access review, least-privilege, privileged-access, and application-ownership controls.
  • Develop production automation using Python, JavaScript, Okta APIs, Workflows, Terraform, and infrastructure-as-code practices.
  • Establish governance and authorization controls for service accounts, API tokens, integrations, AI agents, and MCP access.
  • Serve as the final technical escalation point for complex Okta issues and remain accountable for production outcomes.

Requirements

  • Expert-level, hands-on ownership of an enterprise Okta environment, including architecture, integrations, lifecycle management, authentication policies, governance, and production troubleshooting.
  • Typically 8–10+ years of relevant experience in identity engineering, IT infrastructure, or corporate security, although the posting states there is no fixed years-of-experience minimum.
  • Deep understanding of SAML, OIDC, OAuth, SCIM, federation, authentication, and authorization.
  • Demonstrated production engineering experience with Python and/or JavaScript, APIs, and Terraform or equivalent infrastructure-as-code tools.
  • Experience delivering corporate security controls across SaaS applications, endpoints, device trust, and data protection.
  • Ability to define technical roadmaps, lead complex cross-team work, make security decisions, and own production results.
  • Experience with HR-driven identity modernization, Workday integrations, directory consolidation, identity governance, privileged access, non-human identity, AI-agent or MCP security, or Okta certifications is useful but not required.

Benefits

  • Comprehensive salary and benefits package with medical, dental, and vision coverage.
  • Medical plan options through Aetna and Kaiser Permanente, plus HSA or Healthcare FSA options.
  • Dental plans through MetLife and vision coverage through Vision Care.
  • Generous parental leave, Maven Clinic access, Dependent Care FSA, and One Medical membership for employees and dependents.
  • Pre-tax commuter benefits, life insurance, short-term and long-term disability coverage, and a 401(k) with company match.
  • Unlimited PTO and voluntary benefits including identity protection, legal coverage, and pet savings programs.
  • Global collaboration across Europe, APAC, and North America.
  • In-person work at the Union Square office with company-provided lunch daily.

Salary: $216k - $292k/yr

Legora AB

Legora builds an AI-powered collaborative workspace for legal professionals, used by law firms and in-house legal teams to draft, review, and manage matters. It sells enterprise SaaS to senior legal decision-makers, focusing on precision and speed for complex workflows. Founded in 2023 and headqu...

Similar positions

Security Platform Automation Engineer

  • Apple
  • Full time
  • USA
  • 10/15/2026
  • Seattle, WA

Analytics Engineer

  • Reddit
  • Full time
  • USA
  • 10/15/2026
  • Salary: $164k-$230k
  • Remote

Senior AI Engineer

  • Infiterra S.A
  • Full time
  • Remote
  • 10/15/2026
  • Greece, UK

Security Operations Engineer (SecOps)

  • Collibra
  • Full time
  • USA
  • 10/15/2026
  • Salary: $116k - $145k/yr
  • Remote

Accounting Automation Engineer

  • Ruby Labs
  • Full time
  • Remote
  • 10/15/2026
  • EMEA