Staff Identity Governance and Access Engineer in Northumberland

Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes We are looking for builders and owners who operate with speed and urgency and execute with excellence This is an opportunity to do career-defining work. We’re all in on this mission. If you are too, let’s talk The Identity Governance and Access Security team runs Identity Governance and Administration (IGA), Privileged Access Management (PAM), and Identity Security Posture Management (ISPM) for Okta itself — serving as Okta’s “Customer Zero.” The team owns the complete identity lifecycle for the workforce, from birthright provisioning through Workday to access certifications, privileged access management, and mover/leaver processes What the team builds becomes the reference architecture that Okta customers deploy at scale We’re looking for a Staff Identity Security Engineer to take deep technical ownership of our Okta Identity Governance (OIG), Okta Privileged Access (OPA), and ISPM implementations This is a senior individual-contributor role where you’ll set technical direction for how the team builds on top of these platforms and raise the bar for the engineering team through review, mentorship, and documentation You should be equally comfortable in an architecture discussion, in a live Okta Workflows debugging session, and writing the design doc that a Jira epic gets broken down from OIG Architecture Ownership: Own OIG architecture end-to-end — design access request workflows, entitlement/Resource Collections structures, and certification campaigns that reduce reviewer fatigue and rubber-stamping Lifecycle, Birthright a natural person who is a lawful permanent resident as defined in 8 U.S.C. 1101(a)(20) or who is a protected individual as defined by 8 U.S.C. 1324b(a)(3); or a U.S. national (i.e. includes citizens and non-citizens born in outlying possessions such as American Samoa and Swains Island), green card holders, refugees, and asylees. Working on a U.S. visa does NOT qualify as a U.S. person Experience governing non-human identities (service accounts, API tokens, secrets, AI agents/workload identities) and scaling access certification programs — including distinct ownership models, lifecycle states, and certification approaches Familiarity with ServiceNow and JIRA‑based service request intake for IGA/PAM/ISPM operations Okta certifications — Okta Certified Administrator, Okta Certified Consultant, or Okta Workflows Specialist Technical integration experience with REST APIs, JSON parsing, webhooks, and Workday‑to‑IdP patterns (real‑time event delivery vs. scheduled reconciliation tradeoffs) Experience supporting compliance audits across multiple frameworks beyond SOX (SOC 2, ISO 27001, HIPAA, GDPR) #J-18808-Ljbffr