Principal Forward Deployed Engineer
Embeds with strategic enterprise customers to architect, build, and deploy secure AI-agent identity solutions from prototype through production. The role requires 7+ years of production software engineering experience, deep identity and authorization expertise, hands-on AI integration skills, and strong executive-facing communication.
About the job
Responsibilities
- Become the customer’s trusted technical voice on agent security through standups, design reviews, incident reviews, architecture review boards, and security councils.
- Architect and deploy Okta’s agent security stack—including Cross-App Access (XAA), Fine-Grained Authorization (FGA), MCP Gateway, and agent client registration—within customer infrastructure.
- Own identity, delegation, audit, and kill-switch architecture end to end, and coach customer engineers on implementation patterns.
- Brief CISOs, CIOs, identity leaders, Chief AI Officers, and principal architects on agent risk and AI governance architecture.
- Deliver production deployments with identity coverage, completed security reviews, governance compliance, and posture visibility.
- Align architecture with OWASP Top 10 for Agentic Applications, NIST AI RMF, MITRE ATLAS, and applicable HIPAA, FedRAMP, or SOC 2 requirements.
- Integrate Okta for AI Agents with identity providers, IGA, ISPM, SIEM, EDR, and runtime policy engines.
- Build evaluations and observability for authorization latency, scope sprawl, delegation anomalies, audit completeness, kill-switch verification, and rogue-agent detection.
- Convert recurring field patterns into reusable modules and product roadmap improvements.
- Maintain regular onsite presence at customer locations and travel internationally up to 35%.
Requirements
- 7+ years shipping production software, with current hands-on development, on-call experience, and operational maturity in high-throughput authentication and authorization systems.
- Experience with OAuth 2.0, OIDC, SAML, SCIM, RFC 8693 token exchange, act claims, CIMD, DCR, and DPoP.
- Working knowledge of OWASP Top 10 for Agentic Applications, NIST AI RMF, and MITRE ATLAS.
- Familiarity with Python, MCP, A2A, ISO/IEC 42001, and the EU AI Act.
- Experience mapping deployments to HIPAA, FedRAMP, and SOC 2.
- Experience with ReBAC and ABAC using policy engines such as OPA, Cedar, or OpenFGA.
- Understanding of how agents acquire tokens, call APIs, and delegate.
- Production integration experience with Claude, ChatGPT, Microsoft Copilot, Agentforce, Bedrock, LangChain, CrewAI, the OpenAI Agents SDK, or MCP servers.
- Daily use of AI-native development tools such as Claude Code, Cursor, or GitHub Copilot.
- Ability to work effectively in customer standups and executive security briefings.
- High agency and an end-to-end ownership mindset.
- Ability to travel internationally on occasion, up to 35%.
Skills
Oauth 2.0, OIDC, SAML, SCIM, Python, Mcp, Rebac, Abac, Opa, Cedar, Openfga, LangChain, Crewai, Openai Agents Sdk, Github Copilot
Similar jobs
Solutions Architecture jobs
Cloudflare
Singapore
Principal Solutions Architect leading regional technical strategy for strategic Developer Platform customers and partners across APJC. The role combines hands-on architecture, executive advisory, reusable technical guidance, mentorship, and customer-facing leadership, requiring 15+ years of experience and fluency in English and Mandarin Chinese.
Snowflake
Remote
Leads professional services sales and delivery for strategic accounts, owning roadmaps, proposals, engagements, forecasting, and customer outcomes. The role requires 10+ years in executive-facing sales and services delivery, strong data-solution expertise, and a record of meeting commercial and delivery targets.
Snowflake
Remote
Leads Professional Services sales and delivery strategy for Snowflake’s US Federal accounts, advising executives and managing complex AI, cloud, and data engagements. Requires 10+ years in public-sector sales and services delivery, with strong solution development, forecasting, and customer leadership experience.
Clickhouse
IndiaLeads and scales ClickHouse’s Solutions Architecture function across India and ASEAN, combining people leadership with senior customer-facing technical guidance. The role requires experience in solutions architecture or sales engineering, distributed cloud systems, open-source business models, and team building.
Cohere
United StatesLeads Cohere’s Asia Pacific Solutions Architecture organization, owning team growth, strategic technical wins, and secure enterprise AI deployments across regulated markets. The role requires 15+ years of technical leadership experience, strong regional networks, production AI expertise, and commercial executive presence.