Okta Customer Identity Engineer in London

We are looking for a self-motivated Software Engineer to join the Research and Development team responsible for significant contributions to Software project initiatives associated with product development and improvements. This person is expected to be responsible for well-designed and well-tested code, with the ability to apply creative solutions to problems, and thrive in a multidiscipline team environment.

Responsibilities:

• Designs, develops, tests and documents embedded system software for new and existing Insulet products.
• Ensures that their design is in compliance with Company policies, and that software activities are appropriate for the design and maintenance of medical products.
• Writes and maintains design documentation and testing requirements.
• Works with Quality, Regulatory, Marketing and Manufacturing to ensure that designs meet technical, regulatory and manufacturing requirements.
• Works closely with other software, software QA, and hardware engineers to integrate, debug, and test systems.
• Participate in product design reviews.
• Perform other duties as required.

Education and Experience:

• Bachelor's degree in software engineering and 5+ years of relevant work experience.
• Strong programming skills in C and/or C++ is required.
• Hands-on experience with Embedded Systems is required.
• Experience on processors like ARM, TI and MSP (or similar Embedded Systems/Microcontrollers) is required.

Preferred Skills and Competencies:

• Demonstrated working knowledge of software design.
• Experience developing software for embedded microcontrollers.
• Knowledge of I2C, SPI, Flash, EEPROM and/or USB preferred.
• Familiarity with communication systems and/or wireless protocols will be a plus.
• Medical device experience is preferred.
• Able to work independently with minimum supervision.
• Able to be responsible for designing, implementing, and maintaining a section of a design.
• Detail oriented, with effective verbal and written communication skills.
• Able to communicate with candor and trust at multiple levels of the organization.
• Demonstrated abilities to leverage creativity in order to overcome obstacles and work with a sense of urgency.
• Strong software engineering development skills.
• Knowledge of OS concepts like dead locks, threading, mutual exclusion, interrupt services is expected.
• Good understanding of RTOS and real time systems is a plus.
• In-depth Object oriented programming is useful.
• Familiar with reading electrical schematics is a plus.
• Able to organize and judge multiple priorities.
• Agile or other software development life cycle concepts is a plus.
• Knowledge of Wireless protocols like Bluetooth Low Energy (BLE) is a plus.

Physical Requirements:

• General office environment, may sit for long periods of time.

Position Summary:

We are seeking a mid-level Okta Customer Identity (CIAM) Engineer to design, implement, and operate customer-facing identity capabilities using the Okta platform. This role is ideal for an engineer who can independently deliver well-scoped solutions, apply security best practices to customer authentication flows, and improve reliability through automation and testable deployments.

The CIAM Engineer will work closely with application teams, security, and governance partners to ensure customer identity experiences are secure, scalable, and compliant, supporting use cases such as registration, login, MFA, federation, M2M, and API access patterns.

Key Responsibilities:

• Administer and enhance Okta CIAM configurations including customer authentication policies, MFA enrollment, session management, and sign-on policies.
• Build, maintain, and optimize customer identity flows (e.g., login, registration, account recovery, step-up authentication) with attention to security and user experience.
• Implement and manage customer identity features such as custom claims, token/session behavior, and Authorization Server configurations where applicable.
• Monitor platform health and customer authentication signals; respond to incidents and trends impacting customer login success and security posture.
• Design and implement integrations with customer-facing applications using OIDC/OAuth 2.0 and SAML 2.0, including troubleshooting end-to-end auth flows.
• Partner with application teams to define requirements for claims, scopes, redirect URIs, logout behavior, and session controls.
• Build and maintain automation using Okta Workflows, event hooks/inline hooks (as applicable), and scripting to reduce manual operations and improve consistency.
• Improve operational readiness via runbooks, standardized onboarding of new apps, and reusable configuration patterns.
• Apply security best practices across customer identity including least privilege, secure token policies, MFA strategy, and strong auditability.
• Support compliance and audit evidence collection including configuration traceability, change history, logs, and documented controls.
• Maintain high-quality, versioned documentation including architecture notes, configuration standards, integration guides, and operational runbooks.
• Collaborate with security and governance teams to ensure identity designs align to enterprise policies and customer risk tolerances.
• Leads small-to-medium initiatives end-to-end: scoping, design, implementation, testing, and production rollout.
• Provides technical guidance to junior admins/engineers through reviews, pairing, and knowledge sharing.
• Contributes to reference architecture and platform standards including reusable patterns, best practices, guardrails, and design templates.

Required Qualifications:

• Bachelor’s Degree and/or equivalent combination of education and experience.
• Proven relevant engineering experience including combined with hands-on with Okta in a customer identity context.
• Strong understanding of CIAM fundamentals including authentication flows, MFA enrollment, sessions, and secure customer login patterns.
• Hands-on experience implementing and troubleshooting protocols such as OIDC, OAuth 2.0, and SAML 2.0.
• Strong troubleshooting, analytical, written, and verbal communication skills.

Preferred Qualifications:

• Okta certification(s) such as Okta Certified Administrator or Professional is preferable.
• Experience with Authorization Servers, custom claims, token customization, and hooks.
• Experience integrating identity logs with monitoring or SIEM tools.
• Familiarity with security and compliance frameworks such as NIST, SOC 2, and HIPAA.
• Familiarity with ITSM tools and change management processes (e.g., ServiceNow, Jira).
• Experience managing identity configuration using tools like Terraform.
• Practical experience with automation and repeatability concepts.

Insulet Corporation (NASDAQ: PODD), headquartered in Massachusetts, is an innovative medical device company dedicated to simplifying life for people with diabetes and other conditions through its Omnipod product platform. The Omnipod Insulin Management System provides a unique alternative to traditional insulin delivery methods. With its simple, wearable design, the tubeless disposable Pod provides up to three days of non-stop insulin delivery, without the need to see or handle a needle. Insulet’s flagship innovation, the Omnipod 5 Automated Insulin Delivery System, integrates with a continuous glucose monitor to manage blood sugar with no multiple daily injections, zero fingersticks, and can be controlled by a compatible personal smartphone in the U.S. or by the Omnipod 5 Controller. Insulet also leverages the unique design of its Pod by tailoring its Omnipod technology platform for the delivery of non-insulin subcutaneous drugs across other therapeutic areas. For more information, please visit insulet.com and omnipod.com.

We are looking for highly motivated, performance-driven individuals to be a part of our expanding team. We do this by hiring amazing people guided by shared values who exceed customer expectations. Our continued success depends on it!

Please read our Privacy Notice to learn how Insulet handles your personal information when you apply for a vacancy with us here.