AI Identity Engineer

Job Description

The AI identity engineer is responsible for applying artificial intelligence and machine learning capabilities to accelerate and enhance the organization's identity modernization initiatives. This role sits at the intersection of AI and IAM, translating intelligent automation and model-driven insights into practical identity outcomes that reduce manual overhead, improve access precision, and strengthen identity assurance across the enterprise.

Initial focus areas for this role include identity proofing, least‑privileged enforcement, and entitlement management, leveraging the capabilities of Okta and Persona to build smarter, more adaptive identity workflows that scale with the program’s evolving needs. The role will define and enforce identity‑management strategies tailored for AI agents, including life cycles, entitlements, and owner relationships. Additionally, the role will be responsible for architecting and integrating AI‑based features, such as adaptive access control and identity analytics, into the IAM framework.

• Experience applying AI/ML techniques to identity and access management use cases
• Hands‑on familiarity with Okta’s platform capabilities including Identity Engine, Workflows, and adaptive access controls
• Working knowledge of Persona or comparable identity proofing and verification platforms
• Understanding of entitlement management principles, role engineering, and least‑privilege frameworks
• Ability to translate AI model outputs into actionable IAM policy and workflow automation
• Familiarity with IGA platforms such as SailPoint and how AI can augment access certification and provisioning

• Provide deep subject‑matter expertise across IAM domains (authentication, authorization, federation, SSO, directories, identity lifecycle, and access governance) spanning both cloud and on‑premises enterprise technologies, including hybrid integration patterns.
• Define, evolve, and drive adoption of authentication and authorization reference architectures for existing, new, and emerging IAM capabilities.
• Design end‑to‑end IAM solutions that are secure‑by‑design, scalable, resilient, and reusable—meeting immediate project needs while enabling a coherent, phased architecture aligned to the firm’s strategic direction.
• Lead technical discovery and solutioning for complex, global IAM challenges; propose creative and pragmatic approaches to reduce risk, improve user experience, and increase automation.
• Translate IAM strategy and security principles into implementable technical designs, patterns, and standards (e.g., blueprints, reusable components, configuration baselines).
• Participate in IAM governance processes and influence firm‑wide adoption of IAM standards through technical guidance, architecture reviews, and engineering guardrails.
• Partner with Information Security, Infrastructure, and Application teams to ensure solutions adhere to security policies and standards and are operationally supportable.
• Serve as hands‑on technical lead on IAM initiatives—owning solution design, engineering delivery, and technical alignment across stakeholders.
• Develop and maintain technical roadmaps for IAM and cloud security capabilities, including modernization, platform lifecycle planning, and decommissioning of legacy technologies.
• Provide architecture and engineering expertise for secure cross‑organizational identity integration and information sharing (e.g., B2B/B2C, partner federation, API access patterns).
• Evaluate emerging threats, technology changes, and process gaps; recommend and implement improvements to IAM controls, patterns, and platform configurations.
• Produce and maintain high‑quality technical documentation: architecture diagrams, engineering specifications, security patterns, configuration standards, and implementation guides.

• Interpret IAM strategy and business requirements and convert them into actionable architecture and engineering plans.
• Make design decisions that balance security, usability, scalability, performance, and implementation complexity.
• Identify technical risks, propose mitigation strategies, and drive…