Staff/Principal Identity Engineer
LegoraAI & company
New YorkLead
Accel
Benchmark
Bessemer Venture Partners
General Catalyst
Redpoint Ventures
ICONIQ
Software Engineering
About the role
TL;DR
Own Okta platform, build security controls, manage authentication, identity lifecycle, and automation.
- •We are looking for a hands-on Staff/Principal Identity Engineer to own Legora's Okta platform and build the security controls that protect our employees, applications, devices and data.
- •Key Responsibilities Full ownership of Okta: Own the platform roadmap, architecture, configuration, security posture, integrations, change management and operational reliability.
- •Authentication and application integrations: Design and troubleshoot SSO, SAML, OIDC, OAuth and SCIM integrations.
- •Identity lifecycle and access governance: Build reliable joiner, mover and leaver workflows connecting HR systems, Okta, directories and business applications.
- •Identity engineering and automation: Build production software using Python and JavaScript, Okta APIs, Workflows and Terraform or other infrastructure-as-code tools.
- •Non-human identity and agent authorization: Establish ownership, least privilege, credential lifecycle and revocation for service accounts, API tokens, integrations and AI agents.
- •Requirements Typically 8-10+ years of relevant experience in identity engineering, IT infrastructure or corporate security, with demonstrated expert-level Okta ownership.
Required skills
PythonJavaScriptTerraformOAuthJWTSAMLMFA
Domain expertise
legaltech
Tech stack
PythonJavaScriptTerraformOAuthJWTSAMLMFAMicroservices