Senior Identity Platform Engineer (Okta, passkeys and identity verification)

Job summary

The Senior Identity Platform Engineer owns day-to-day Okta Workforce Identity and delivers a passwordless, phishing-resistant sign-in platform. The role rolls out device-bound passkeys and Okta FastPass, integrates government ID and liveness verification into onboarding and account recovery, and manages Okta configuration as code with Terraform. It also builds Workday-driven lifecycle automation and supports SAML, OIDC, SCIM, and Okta–Auth0 federation.

Benefits

Qualifications

• At least 5 years of identity or platform engineering experience, including at least 2 years operating Okta in production at scale.
• Hands-on experience rolling out passwordless authentication using FIDO2, WebAuthn, passkeys, Okta FastPass, or similar, including recovery design.
• Experience with Okta Workflows, Okta APIs, SCIM, and Terraform's Okta provider or similar configuration-as-code tools.
• Experience with HR-driven provisioning, ideally using Workday.
• Scripting skills in Python, Go, or similar, and experience with Git and code review.

Responsibilities

• Own day-to-day Okta Workforce Identity configuration, policies, roles, groups, and application integrations.
• Manage Okta configuration with Terraform, peer review, testing, and staged releases.
• Automate joiner, mover, and leaver workflows from Workday using Okta Workflows and APIs.
• Support federation between Okta and Auth0 for staff access to customer platforms.
• Roll out device-bound passkeys and Okta FastPass, using FIDO2 hardware keys where required.
• Design account recovery based on identity verification rather than help-desk resets or personal email links.
• Integrate government ID and liveness verification into onboarding and account recovery.

Skills

Languages

Industry

Relocation