Secure Every Identity, from AI to Human
Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence.
This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk.
The Opportunity: Okta Access Gateway (OAG)
Enterprises run on a mix of modern cloud services and mission-critical on-premises systems (such as Oracle E-Business Suite, SAP, PeopleSoft, and custom legacy web apps). Okta Access Gateway (OAG) solves the enterprise hybrid cloud challenge by extending Okta’s cloud identity, Adaptive MFA, and Zero Trust security policies to on-premises and legacy applications without requiring custom code changes or traditional VPNs.
As the Engineering Manager for Okta Access Gateway in Toronto, you will lead and grow a team of software engineers building the next generation of our hybrid access and gateway infrastructure. You will partner closely with Product Management, Architecture, Security, and Quality teams to deliver high-throughput, mission-critical security software deployed across multi-cloud and enterprise datacenters globally.
What You’ll Do
People Leadership & Team Growth
- Lead, mentor, and empower an engineering team, fostering an inclusive, high-performance, and psychologically safe engineering culture.
- Drive career progression, goal setting, regular 1:1s, and continuous feedback to help engineers grow their technical and leadership skills.
- Attract, interview, and hire diverse engineering talent to scale Okta’s engineering presence in Toronto.
Delivery & Operational Excellence
- Own the end-to-end execution and delivery of key product roadmap initiatives, balancing feature velocity, technical debt, and software quality.
- Establish predictable agile delivery cadences (Scrum/Kanban), driving accurate scope estimation, milestone tracking, and stakeholder communication.
- Champion operational rigor, security standards, high availability, and performance benchmarking for customer-deployed gateway appliances.
Technical Strategy & Collaboration
- Partner closely with Product Managers, Technical Architects, and UX designers to define technical roadmaps and product requirements.
- Participate in architectural reviews, system design proposals, and threat modeling without micromanaging day-to-day code implementation.
- Guide the team in modernizing gateway capabilities, containerization, deployment automation, and seamless integration with the core Okta Identity Cloud.
What You’ll Bring
- Engineering Leadership: 2+ years of experience formally managing software engineering teams (or 4+ years as a hands-on Lead / Staff Engineer leading complex, multi-engineer projects to delivery).
- Technical Background: 8+ years of total software engineering experience designing and operating enterprise-scale distributed systems or infrastructure products.
- Enterprise Stack Experience: Strong background in server-side technologies (e.g., Java / Spring Boot, Go, or C/C++) and distributed systems concepts (concurrency, caching, high throughput, and asynchronous processing).
- Security & Networking Acumen: Solid understanding of network architecture, TLS/SSL, reverse proxies/gateways, HTTP headers, DNS, and cloud environments (AWS, Azure, or GCP).
- Execution & Agile Rigor: Proven track record of managing agile delivery, CI/CD automation pipelines, and cross-functional dependencies across distributed teams.
- Communication: Exceptional verbal and written communication skills with the ability to articulate complex technical trade-offs to both technical and executive stakeholders.
Bonus Points (Nice to Have)
- Deep knowledge of Identity & Access Management (IAM) and authentication protocols: SAML 2.0, OAuth 2.0 / OIDC, Kerberos / IWA, Header-Based Auth, and FIDO2 / WebAuthn.
- Experience building or operating Reverse Proxies (NGINX / Envoy / HAProxy), API gateways, or Linux-based virtual appliances (OVA / AMI / VHD / Containers).
- Experience with Zero Trust network access (ZTNA) or enterprise hybrid integrations (Oracle, SAP, IBM, Microsoft).
- Experience building or scaling engineering teams in a hybrid/distributed model.
#P9206_3561524
Below is the annual salary range for candidates located in Canada. Your actual salary will depend on factors such as your skills, qualifications, and experience. In addition, Okta offers equity (where applicable), bonus, and benefits, including health, dental, and vision insurance, RRSP with a match, healthcare spending, telemedicine, and paid leave (including PTO and parental leave) in accordance with our applicable plans and policies. To learn more about our Total Rewards program, please visit: https://rewards.okta.com/can.
The annual base salary range for this position for candidates located in Canada is between:
$168,000—$231,000 CAD
The Okta Experience
We are intentional about connection. Our global community, spanning over 20 offices worldwide, is united by a drive to innovate. Your journey begins with an immersive, in-person onboarding experience designed to accelerate your impact and connect you to our mission and team from day one.
Okta is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, marital status, age, physical or mental disability, or status as a protected veteran. We also consider for employment qualified applicants with arrest and convictions records, consistent with applicable laws.
If reasonable accommodation is needed to complete any part of the job application, interview process, or onboarding please use this Form to request an accommodation.
Notice for New York City Applicants & Employees: Okta may use Automated Employment Decision Tools (AEDT), as defined by New York City Local Law 144, that use artificial intelligence, machine learning, or other automated processes to assist in our recruitment and hiring process. In accordance with NYC Local Law 144, if you are an applicant or employee residing in New York City, please click here to view our full NYC AEDT Notice.