Staff Fullstack Engineer, Okta Secures AI
Leads architecture and implementation of Okta’s Identity Security Fabric for human and AI-agent identities. The role combines scalable backend systems, Java and TypeScript full-stack development, AWS, authentication and authorization, and technical leadership in AI-native engineering practices.
About the job
Responsibilities
- Shape the technical strategy of the Identity Security Fabric and partner with leadership to prioritize open standards such as IPSIE.
- Implement the four-pillar maturity model—Discover, Onboard, Protect, and Govern—across full-stack ecosystems.
- Architect systems to discover and secure agents, including “Shadow AI” assets.
- Enforce secure access and least privilege for agents through Agent Gateways and short-lived credentials.
- Advance AI-native development practices across design, review, and software delivery workflows.
- Identify and prioritize technical debt, including improvements to CI/CD, observability, documentation, reliability, and support processes.
- Partner with Product and Design to own desired customer outcomes.
- Mentor peer engineers and raise the team’s technical bar.
Requirements
- Apply AI meaningfully across the full software development lifecycle, evaluate AI tooling, and establish effective team practices.
- Define scalable backend architectures and integrate complex APIs with modern web technologies.
- Make and defend architectural decisions with lasting organization-wide impact.
- Understand web authentication and authorization fundamentals and best practices for securing sensitive user data.
- Build highly reliable, secure, enterprise-grade software using Java or another type-safe programming language.
- Proficiency in JavaScript and TypeScript, including the ability to contribute to frontend development.
- Understand cloud architecture principles and design and operate large-scale services on AWS.
Nice-to-haves
- Lead an engineering team through a significant shift in ways of working, such as AI adoption, developer tooling, or engineering culture change.
- Build or maintain publicly released SDKs used by external developers.
- Experience developing Identity and Access Management (IAM) tooling.
- Experience contributing to a zero-to-one, startup-like team.
Compensation and Benefits
- Annual base salary range for candidates located in Canada: $160,000–$220,000 CAD.
- Equity, where applicable, bonus, health, dental, and vision insurance.
- RRSP with a match, healthcare spending, telemedicine, and paid leave, including PTO and parental leave.
Skills
Java, JavaScript, TypeScript, AWS, Distributed Systems, REST APIs, Web Authentication, Authorization, IAM, CI/CD, Observability, SDKs, Ipsie, Mcp, Cloud Architecture
Similar jobs
Fullstack Engineering jobs
Okta
Toronto, Canada
Staff full-stack engineer owning zero-to-one AI identity capabilities, including agent authorization and phishing-resistant access. The role requires architectural leadership, strong Java and JavaScript/TypeScript expertise, AWS experience, security fundamentals, and the ability to mentor teams and apply AI tooling across development.
Okta
Toronto, Canada
Staff full-stack engineer leading zero-to-one development of AI identity features, including agent authorization and phishing-resistant access. The role requires architectural expertise, Java and JavaScript/TypeScript proficiency, AWS experience, and the ability to raise team-wide engineering standards.
Twilio
CanadaBuild and lead production-grade full-stack AI and data applications supporting Twilio’s business functions, with a focus on scalable infrastructure and customer-support transformation. The role requires 8+ years of software or data engineering experience, technical leadership, and expertise in distributed systems and modern web technologies.
GitLab
United StatesLeads technical direction and builds reliable frontend and backend purchasing experiences using Ruby on Rails and Vue.js. The role requires transactional-flow experience, strong architectural judgment, mentoring ability, and safe delivery of revenue-impacting systems.
Fivetran
Toronto, Canada
Builds and operates end-to-end data activation features across UI, backend, authentication, billing, and data models. The role requires broad full-stack experience across interpreted and compiled languages, databases, APIs, cloud platforms, and distributed team leadership.