Senior Identity Platform Engineer (Okta, passkeys and identity verification)
About the Role
Location: New York, Houston, San Francisco or Seattle ·
We’re hiring a Senior Identity Platform Engineer to make Okta Nscale’s single front door: phishing-resistant sign-in only, no usable password, and identity infrastructure managed as code.
As a Senior Identity Platform Engineer, you’ll deliver our passkey rollout, integrate identity verification into onboarding and recovery, and bring Okta configuration under Terraform. You’ll work alongside an existing Staff Okta engineer, who remains the senior technical voice on Okta. This is a hands-on delivery role with day-to-day ownership of Okta Workforce Identity.
What you'll be doing
Okta platform and automation
- Own Okta Workforce Identity day to day, including sign-on and authentication policies, device assurance, admin roles, groups, and app integrations using SAML, OIDC and SCIM.
- Bring Okta configuration under Terraform, with peer review, testing and staged releases.
- Build joiner, mover and leaver automation from Workday through Okta using Okta Workflows and APIs.
- Support federation between Okta and Auth0 for staff access to customer platforms.
Passwordless sign-in
- Lead the move to passwordless sign-in: roll out device-bound passkeys and Okta FastPass for everyone, use FIDO2 hardware keys where mandated, and enforce policies group by group until nobody can sign in with a password.
- Design recovery so that access is restored through identity verification, rather than a help-desk reset or a link to a personal inbox.
Verified onboarding and recovery
- Integrate an identity verification service using government ID and a liveness check into onboarding and account recovery.
- Ensure the first passkey and every recovery start from a verified identity.
KPIs
- Phishing-resistant sign-in enforced for everyone; no password sign-in available
- Verified identity before first-passkey enrolment and every account recovery
- Okta configuration managed through Terraform, peer review, testing and staged releases
About You
- 5+ years in identity or platform engineering, including at least 2 years running Okta in production at scale.
- Hands-on experience rolling out passwordless authentication using FIDO2/WebAuthn, passkeys, Okta FastPass or similar, including recovery design.
- Experience with Okta Workflows, Okta APIs and SCIM, plus Terraform’s Okta provider or similar configuration-as-code tooling.
- Experience with HR-driven provisioning, ideally from Workday.
- Scripting skills in Python, Go or similar, and experience using Git and code review.
Nice to have
- Experience integrating identity verification services such as Persona, Incode, iProov, Nametag or similar.
- Experience with Auth0.
- Google Workspace administration experience.
The range below reflects the base salary for the position. Actual compensation may vary based on job-related factors such as skill set, experience, education, and location. In addition to base salary, this role may be eligible for bonus, equity, and/or commission programs. Nscale may offer a competitive benefits package including medical, dental, vision, flexible paid time off, parental leave, and retirement plan participation.
Salary Range
$160,000-$210,000 USD
For information on how Nscale handles candidate personal data, please see our Employee & Candidate Privacy Notice: Here.
Nscale does not accept unsolicited candidate submissions from recruitment agencies.