Secure Every Identity, from AI to Human
Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence.
This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk.
Okta is the leading independent provider of enterprise identity. The Okta Identity Cloud enables organizations to securely connect the right people to the right technologies at the right time. With over 6,500 pre-built integrations to applications and infrastructure providers, Okta customers can easily and securely use the best technologies for their business. Over 7,950 organizations, including 20th Century Fox, JetBlue, Nordstorm, Slack, Teach for America and Twilio, trust Okta to help protect the identities of their workforces and customers.
Position DescriptionWe are seeking an experienced Staff Software Engineer to lead the technical evolution of the Okta Recovery Vault (ORV). This team is responsible for Okta's enterprise-grade soft-delete and object recovery capability, designed to protect critical identity objects (Users and Groups) from accidental or malicious deletion.
As a Staff Engineer, you will own the architectural design and implementation of a real-time, high-fidelity recovery system that preserves object identity (UUIDs) and restores complex relationships—including group memberships, app assignments, and password hashes. You will drive technical strategy to bridge the gap where deletions were previously permanent and irreversible.
Job Duties and Responsibilities- Technical Leadership: Lead the architectural design and implementation strategy for the Recovery Vault, ensuring high performance and scalability.
- System Ownership: Independently own and deliver end-to-end features, such as granular and bulk recovery workflows, across both Free and Advanced Resilience tiers.
- Architecture & Migration: Design core components for real-time recovery that capture every deletion event, ensuring superiority over point-in-time third-party backup providers.
- Relationship & State Management: Solve complex challenges regarding relationship restoration (group memberships, app assignments, device enrollments) and identity preservation (UUID).
- Security & Compliance: Ensure all recovery actions (soft-delete, restore, permanent-delete) are logged in Syslog to maintain audit compliance.
- Collaboration: Partner with Product Management to refine the "how" of features like configurable retention periods (7 to 90 days) and self-service recovery UIs.
- Operational Excellence: Troubleshoot complex production incidents, perform root cause analysis, and drive improvements in observability and alerting.
- Mentorship: Provide technical guidance to senior and junior engineers on the team.
- Experience: 7+ years of software development experience building highly-reliable, mission-critical software at scale.
- Java Expertise: Deep expertise with object-oriented languages, particularly Java and the Spring Boot framework.
- Distributed Systems: Strong understanding of distributed job processing, asynchronous processing, and event-driven architectures (essential for bulk restore jobs).
- Identity Standards: Expert knowledge of Identity and Access Management protocols (SCIM, SAML, OAuth, OIDC) and directory services (AD, LDAP).
- Data Management: Solid experience with relational databases (MySQL) and caching layers (Redis) to manage captured object snapshots.
- API Design: Proven track record with RESTful APIs to support API-first recovery for enterprise automation.
- Leadership: Demonstrated ability to lead technical projects independently and influence cross-team initiatives.
- Experience with data modeling for relationship management and identity resolution.
- Knowledge of Recycle Bin capabilities for competitive benchmarking.
- Experience with gradual rollout strategies and feature flag frameworks.
- Background in building resilient systems with retry logic and circuit breakers.
- B.S. in Computer Science or a related field.
P24993_3416801
#LI_Hybrid
The Okta Experience
- Supporting Your Well-Being
- Driving Social Impact
- Developing Talent and Fostering Connection + Community
We are intentional about connection. Our global community, spanning over 20 offices worldwide, is united by a drive to innovate. Your journey begins with an immersive, in-person onboarding experience designed to accelerate your impact and connect you to our mission and team from day one.
Okta is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, marital status, age, physical or mental disability, or status as a protected veteran. We also consider for employment qualified applicants with arrest and convictions records, consistent with applicable laws.
If reasonable accommodation is needed to complete any part of the job application, interview process, or onboarding please use this Form to request an accommodation.
Notice for New York City Applicants & Employees: Okta may use Automated Employment Decision Tools (AEDT), as defined by New York City Local Law 144, that use artificial intelligence, machine learning, or other automated processes to assist in our recruitment and hiring process. In accordance with NYC Local Law 144, if you are an applicant or employee residing in New York City, please click here to view our full NYC AEDT Notice.
Skills Required
- 7+ years software development experience building highly-reliable, mission-critical software at scale.
- Deep expertise in Java.
- Experience with the Spring Boot framework.
- Strong understanding of distributed job processing, asynchronous processing, and event-driven architectures.
- Expert knowledge of identity and access management protocols (SCIM, SAML, OAuth, OIDC).
- Knowledge of directory services (Active Directory, LDAP).
- Experience with relational databases (MySQL).
- Experience with caching layers (Redis).
- Proven track record designing RESTful APIs for API-first automation.
- Demonstrated ability to lead technical projects independently and influence cross-team initiatives.
- B.S. in Computer Science or a related field.
- Experience with data modeling for relationship management and identity resolution.
- Knowledge of Recycle Bin capabilities for competitive benchmarking.
- Experience with gradual rollout strategies and feature flag frameworks.
- Background building resilient systems with retry logic and circuit breakers.
Okta Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Okta and has not been reviewed or approved by Okta.
-
Healthcare Strength — Health coverage spans medical, dental, vision, mental-health support, and income protection, complemented by preventive care options and wellness resources. These elements indicate robust coverage for both routine needs and more complex situations.
-
Parental & Family Support — Policies include paid parental leave, adoption and surrogacy assistance, and fertility and family‑building benefits. Caregiving resources and flexible arrangements help employees navigate family responsibilities.
-
Leave & Time Off Breadth — Flexible or unlimited PTO, separate sick time, paid holidays, and a company Wellbeing Week provide multiple avenues for time away. This breadth supports rest, recovery, and work‑life balance.
Okta Insights
What We Do
Okta is the leading independent identity provider. The Okta Identity Cloud enables organizations to securely connect the right people to the right technologies at the right time. With more than 7,000 pre-built integrations to applications and infrastructure providers, Okta provides simple and secure access to people and organizations everywhere, giving them the confidence to reach their full potential. More than 10,000 organizations, including JetBlue, Nordstrom, Siemens, Slack, T-Mobile, Takeda, Teach for America, and Twilio, trust Okta to help protect the identities of their workforces and customers.
