Secure Every Identity, from AI to Human

Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence.

This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk.

About this role

Okta Secures AI is how enterprises give AI agents an identity, govern what those agents can reach, and prove it to auditors. The buyers are engineers, architects, and security practitioners who expect technical proof, not a business-value slide. The Technical focus area owns that audience: the reference architectures, technical content, demos, and deep-dive assets that hold up under live questioning.

You are the execution engine for that motion. You keep the technical content set accurate, current, and usable as the product ships new capabilities, and you take on well-scoped builds so the rest of the team can focus on net-new strategy and proof. Your first major ownership area is the technical content for the Blueprint Maturity Model (BMM). The BMM is the staged framework (Foundational, Scaling, Advanced, Strategic) that TAMs, CSMs, and FDEs use to move customers from first agent discovery to fully governed, production-scale agent identity. You also help with the plans, guides, and templates that go with it.

This is a hands-on, technical role. You will learn the product deeply, build and maintain assets, and work with the field teams who use your content every day. You'll start mostly behind the scenes and close to the field. As your depth and judgment grow, you'll spend more time directly in front of customers.

Core responsibilities

Every role in this org carries these, applied to its focus area. At this level, you contribute to and execute against each one, with guidance from the Technical lead.

• Messaging and positioning: Apply the Technical narrative consistently across every asset you build or maintain, and flag where content has drifted from what the product actually does.
• Buyer, persona, and market insight: Capture what you hear from TAMs, CSMs, FDEs, SEs, and customer calls, and turn it into concrete updates to content and the BMM.
• Competitive and category intelligence: Track roadmap changes, competitor feature releases, and protocol developments (MCP, Cross App Access, agent auth patterns), and summarize what they mean for our technical content.
• Go-to-market planning and launch execution: Get technical assets, guides, and BMM entries updated and ready when features move from roadmap to Beta, EA, and GA.
• Sales enablement and field readiness: Maintain the guides, demo catalog, and reference material that SEs, TAMs, and CSMs rely on, and track whether they actually use it.
• Customer-facing content and asset ownership: Own accuracy and freshness for your assigned assets end to end, starting with the BMM, and retire what's outdated.
• Cross-functional influence: Work with product, engineering, Customer Success, and Professional Services to collect the inputs you need without formal authority over any of them.
• Roadmap, pricing, and packaging input: Bring recurring field and customer feedback (product gaps, feature requests, deployment friction) to the Technical lead with the evidence behind it.

What you'll own

• The Blueprint Maturity Model technical content. Keep each stage and capability current: the customer value, the Okta feature that delivers it, and the guide that implements it. Add new capabilities as they ship, move "to be released" items into active stages as they reach Beta, EA, or GA, and keep stage criteria aligned with how customers actually progress.
• The BMM's associated content and templates. Keep the TAM Technical Project Plan, Customer Overview, Status Overview, and Actions & Deliverables templates consistent with the model. That means matching numbering, accurate task lists, and correct ownership (RACI) across CSM, TAM, PS, and FDE.
• Implementation guides and technical collateral. Build and maintain the step-by-step guides linked from the BMM and the wider content set (for example SSO for agents, Cross App Access, agent import and registration, token exchange, secure token storage, system log streaming to a SIEM, and agent deactivation), so every BMM entry points to something a TAM can hand to a customer.
• Demo environments and the demo catalog. Keep demos working as the product changes, document every setup to the team's standard, and capture high-quality screenshots, visuals, and recordings for reuse.
• Field feedback loop. Gather input from TAMs, CSMs, and FDEs on where customers get stuck in the BMM, and turn it into proposed updates for the Technical lead to review.
• Release and roadmap tracking. Watch Okta Secures AI release notes, Beta and EA programs, and competitor launches, and keep a running log of what needs updating in the content set.
• Scoped builds for the team. Take on assigned pieces of larger projects, such as reference architecture diagrams, deep-dive sections, and demo scenarios, and deliver them accurately and on time.

How you'll work with customers

You'll start close to the field rather than out in front of it. You'll join TAM, CSM, and SE calls to hear where customers get stuck, support demos and technical sessions, and check that BMM guidance holds up in real deployments. As your product depth and confidence grow, you'll run demos and technical sessions yourself, present the BMM to customers, and represent Okta Secures AI at technical and developer events. Your customer-facing scope expands as you earn it.

What you'll bring

• 2–5 years in technical marketing, solutions engineering, technical account management, professional services, developer relations, or another technical customer-facing role for a B2B software product. Identity or security experience is a plus.
• Hands-on proficiency with SaaS admin consoles, CLIs, and APIs. You can stand up an integration, follow (and improve) technical documentation, and debug when a setup doesn't behave.
• Working knowledge of identity fundamentals (SSO, OAuth 2.0, OIDC, SAML) and a strong interest in going deep on agent identity: MCP, Cross App Access, token exchange, and agent authentication and authorization patterns.
• Clear technical writing. Your guides are accurate, well-structured, and usable by someone who wasn't in the room.
• Rigor and attention to detail. You keep a large, fast-changing body of content consistent, version-controlled, and correct.
• Proactive habits. You spot gaps and stale content without being asked, and you come with a proposed fix.
• Comfort working across teams and taking input from TAMs, CSMs, SEs, product managers, and engineers.
• Comfort operating in an early, fast-moving market where the product, the roadmap, and the guidance change weekly.
• Willingness to travel occasionally (roughly 10%) for customer engagements, team sessions, and events. This will grow as your role becomes more customer-facing.

Success looks like

• BMM and associated content are accurate, current, and delivered on time, and no shipped capability is missing from the model or its guides.
• TAMs, CSMs, and FDEs use the BMM and its guides to drive customer progression without reworking them.
• Assets you build are reused across at least two channels or teams.

Growth path

This role is the foundation of the Technical team. Growth toward the next level means moving from executing assigned work to independently finding gaps, building self-documented solutions without being asked, and owning more of the customer-facing technical conversation yourself.

P26090

The annual base salary range for this position for candidates located in the San Francisco Bay area is between: $122,000—$168,000 USD

Below is the annual base salary range for candidates located in California (excluding San Francisco Bay Area), Colorado, Illinois, New York and Washington. Your actual base salary will depend on factors such as your skills, qualifications, experience, and work location. In addition, Okta offers equity (where applicable), bonus, and benefits, including health, dental and vision insurance, 401(k), flexible spending account, and paid leave (including PTO and parental leave) in accordance with our applicable plans and policies. To learn more about our Total Rewards program please visit: https://rewards.okta.com/us.   

The annual base salary range for this position for candidates located in California (excluding San Francisco Bay Area), Colorado, Illinois, New York, and Washington is between:$109,000—$149,000 USD

The Okta Experience

• Supporting Your Well-Being 
• Driving Social Impact 
• Developing Talent and Fostering Connection + Community

We are intentional about connection. Our global community, spanning over 20 offices worldwide, is united by a drive to innovate. Your journey begins with an immersive, in-person onboarding experience designed to accelerate your impact and connect you to our mission and team from day one.

Okta is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, marital status, age, physical or mental disability, or status as a protected veteran. We also consider for employment qualified applicants with arrest and convictions records, consistent with applicable laws.

If reasonable accommodation is needed to complete any part of the job application, interview process, or onboarding please use this Form to request an accommodation.

Notice for New York City Applicants & Employees: Okta may use Automated Employment Decision Tools (AEDT), as defined by New York City Local Law 144, that use artificial intelligence, machine learning, or other automated processes to assist in our recruitment and hiring process. In accordance with NYC Local Law 144, if you are an applicant or employee residing in New York City, please click here to view our full NYC AEDT Notice.