Senior Software Engineer (Agent Gateway)

Join Okta as a Senior Software Engineer on the Agent Gateway team, where you will build and enhance the identity-aware infrastructure that connects enterprise AI agents to authorized tools, data, and services. You will own features and components across the data and control planes, implementing token exchange, request routing, credential resolution, and policy evaluation. This hands-on role requires proficiency in Java and/or Go, experience with production backend systems, and a working knowledge of OAuth 2.0 and OIDC.

Responsibilities

• Ownership of the implementation of gateway features end-to-end, including token exchange and policy evaluation.
• Writing code that handles credentials, tokens, tenant isolation, and audit logging with care, ensuring correctness and reliability.
• Participating in code review, testing, incident response, and contributing to the team's engineering standards.

Requirements

• Communication: Clear written and verbal communication, and the ability to collaborate across a data plane service and a larger identity control plane
• Agentic Fluency: Working familiarity with agentic development tools (e.g., Claude Code, MCP servers, AI-assisted code review), with a point of view on where they accelerate work
• Experience: 4+ years building production backend systems, ideally distributed and highly available
• Technical Depth: Proficiency shipping production services in Java and/or Go
• Operational Sense: Hands-on experience with service rollouts, feature flags, observability, and incident response
• Domain Knowledge: Working knowledge of OAuth 2.0 and OIDC, and comfort reading and implementing spec-driven code. Familiarity with RFC 8693 token exchange is a plus
• Experience building or integrating with an MCP server, an agent framework, or an LLM-facing gateway
• Prior work on multi-tenant SaaS platforms

Exposure to identity, authorization, or edge-of-network services

• Active participation in standards work in the agent identity space (MCP, OAuth, GNAP, DCR)
• Full-stack or frontend experience for the gateway's admin and configuration surfaces