Manager, Customer Identity, Security Engineering
Okta · Posted Nov 2
Cloud-based identity and access management solutions for workforce and customer security
Bengaluru, IndiaFull-timeHybridLead/Staff8+ years₹65.0L–₹1.1Cr yearly57 applicants
Enterprise SoftwareCybersecurityIdentity ManagementCloud ComputingPublic Company
Be an early applicantFull time
Get a personal compatibility score
Add a resume for personal matches
About the role
Okta's Customer Identity unit (Auth0) is hiring a Security Engineering Manager to lead globally distributed security engineering teams embedded in the product organization. The teams focus on threat protection — including AI-driven threat intelligence and research into how attackers leverage AI — and on building micro-services and tooling that secure Customer Identity products and infrastructure, including secrets generation, storage, rotation, and retirement. The role sets multi-quarter direction, partners with Product, Engineering, and Identity Security leadership, and turns threat research into shipped protections for customer tenants.
What you will do
- Hire, lead, coach, and develop globally distributed teams of security engineers (Senior through Staff), building a culture of research discipline, technical excellence, and ownership
- Define and execute a multi-quarter roadmap for your teams, aligned with Customer Identity business goals and Okta's company-wide security strategy, and balance investment and prioritization across them
- Lead the delivery of scalable, reliable micro-services and automation that secure Customer Identity products and infrastructure, including secrets storage, rotation, access control, auditing, and workload identity
- Drive adoption of secure-by-default secrets handling across Auth0 engineering teams, and reduce the risk from hard-coded, long-lived, or over-privileged credentials
- Research the emerging AI threat landscape and translate it into a forward-looking (12–24 month) view of what we need to protect ourselves and our customers from, then prioritize investments in detection, tooling, and protections to get there
- Direct research and protections against emerging general and AI-driven security threats targeting Auth0 and Auth0's customers — including traditional identity attacks as well as adversarial ML, prompt injection, abuse of agentic protocols (MCP, A2A, UCP), and data poisoning — as they apply to identity systems and customer tenants
- Guide the review and hardening of Auth0's AI security offering, using analysis of past incidents to drive improvements such as new detection signals, heuristic updates, and data labeling enhancements, while identifying gaps and recommending mitigations before they're exploited
- Partner with the identity security teams to help customers strengthen their own tenant security posture through comprehensive defenses and security countermeasures
- Partner across Product, Engineering, and Identity Security leadership to turn research into shipped protections for customer tenants, both proactively (hardening posture before an attack) and during active incidents (accelerating detection, triage, and response)
- Drive adoption of scalable security solutions and automation that operationalize threat defenses and secrets protections at scale
- Own and influence high-impact security architecture decisions across Auth0 and Okta Customer Identity infrastructure to support long-term threat resilience
- Collaborate with the Okta Security team on security operations and, where relevant, support investigations, root cause analysis, and remediation
- Advise stakeholders on mitigation strategies for security risks, including end-of-life software and vulnerabilities, in support of the teams that own patching
- Communicate risk, progress, and trade-offs clearly to senior leadership, and turn research into clear guidance for engineering and product teams
- Manage team health, prioritization, and delivery across time zones, including India
Skills used in this role
What the employer is looking for
- You have 8+ years of experience in security engineering, with a strong foundation in cloud infrastructure and/or product security
- You have 3+ years of experience managing security or software engineering teams, with a track record of hiring, developing, and retaining strong engineers
- You have a hands-on development background — Go / Node preferred — sufficient to guide the design and review of micro-services, evaluate prototypes, and steer the building of security tooling and AI-powered defenses
- You have hands-on experience with AI/ML security — attacking, defending, or both (e.g., adversarial ML, LLM/prompt-injection attacks, agentic-system or model abuse), and an interest in using AI to build defenses, not just to study attacks
- You have working knowledge of secrets management and cryptographic key handling (e.g., vaulting, rotation, short-lived credentials, workload identity)
- You have working knowledge and hands-on experience with one or more of the following:
- AWS and/or Azure security
- Kubernetes
- You have strong knowledge of OWASP security standards and frameworks (including the OWASP Top 10 for LLM Applications) and secure coding best practices
- You have a strong foundation in secure software development lifecycle best practices
- You have a proven record of setting technical vision, defining multi-quarter strategy, driving architectural consensus, and influencing cross-organizational security initiatives
- You have strong written and verbal communication skills, with the ability to turn research into clear guidance for engineering, product, and executive audiences
- You have experience leading a globally distributed and remote team, ideally across multiple time zones including India
Preferred qualifications
- You have published threat research, CVEs, or conference talks in AI/ML security or identity security
- You have built or led teams building AI/ML-powered security tooling or defensive automation in a production environment
- You have experience building or operating secrets management platforms (e.g., HashiCorp Vault, cloud KMS and secret managers) at scale
- You have working knowledge and experience with one or more of the following:
- Adversarial ML, model red-teaming, or AI safety research
- The AI agent / MCP ecosystem and its security implications
- Identity and access management
- Full-stack engineering
- Site reliability engineering
- Vulnerability and threat management
- Governance, risk and compliance
Benefits and support
- Compensation and benefits are detailed in the job posting
About Okta
Okta is a leading independent provider of cloud-based identity and access management solutions that securely connect people and technologies to the right applications. The company powers both Workforce Identity and Customer Identity platforms, allowing organizations to securely manage user access and navigate modern challenges like agentic AI security.
- Industry
- Enterprise Software
- Company size
- 7500+ employees
- Founded
- 2009
- Location
- San Francisco, California, USA
- Funding stage
- Public Company
Funding
Public Company · $228M raised
Sequoia CapitalAndreessen HorowitzGreylock PartnersKhosla VenturesAltimeter Capital
- 2010-02-01Series A$10M
- 2011-08-01Series B$16.5M
- 2012-12-01Series C$25M
- 2013-09-01Series D$27M
- 2014-06-01Series E$75M
- 2015-09-01Series F$75M
- 2018-02-21Post IPO Debt$300M
Leadership
TM
Todd McKinnon
Co-Founder and Chief Executive Officer
FK
Frederic Kerrest
Co-Founder and Executive Vice Chairman
SD
Shannon Duffy
Chief Marketing Officer
SM
Scott Morgan
Chief Legal Officer
Recent coverage
Okta Newsroom
Industry Leaders Form the Blueprint Alliance to Advance a Shared Architecture for Securing AI Agents2026-09-22
Okta Newsroom
Okta Names Helen Riley to Board of Directors2026-09-18
Okta Newsroom
Okta to Host Investor Summit Webcast in Conjunction with Oktane2026-09-14