Enter a job title or keyword

Senior Software Engineer, Agent Gateway

Okta


Job Location:

Toronto - Canada

Yearly Salary: CAD 136000 - 187000
Posted: 29 September 2026 (19 hours ago)
Application Deadline: 27 December 2026
Vacancies: 1 Vacancy

Job Summary

Secure Every Identity from AI to Human

Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence.

This is an opportunity to do career-defining work. Were all in on this mission. If you are too lets talk.

The Agent Gateway Team

The Agent Gateway team owns the identity-aware infrastructure that connects enterprise AI agents to the tools data and services their organizations authorize. Every call from Claude Agentforce Codex and internal/homegrown agents to a resource flows through us. We enforce authorization isolate credentials mint the right token per target and produce the audit trails that security teams rely on.

We are early in a rapidly evolving space. The standards for agent identity (MCP OAuth token exchange DCR) are being built under our feet. Our roadmap includes hardening the data plane for on-premises customer deployments extending policy semantics beyond tool-level allowlists adding native support for Agent-to-Agent brokered delegation and scaling to tenants with thousands of virtual MCP servers.

The Senior Software Engineer Opportunity

Okta is looking for a Senior Software Engineer to help build the Agent Gateway. You will own features and components across the data and control planes turning technical designs and product requirements into reliable production systems. Working alongside staff engineers you will implement token exchange request routing credential resolution and policy evaluation as agent identity specifications evolve.

This is a hands-on software development role at the intersection of product security and infrastructure. You will ship services that handle agentic traffic reliably and performantly at scale.

What Youll Be Doing
  • Build and Ship: Own the implementation of gateway features end-to-end from virtual MCP server aggregation to token exchange and policy evaluation with tests observability and operational readiness built in.
  • Work in the Runtime Path: Write code that handles credentials tokens tenant isolation and audit logging with care. The gateway sits in the critical path for customer agent traffic so correctness and reliability matter on every change.
  • Implement the Protocols: Read and implement MCP OAuth token exchange and agent identity specifications and feed production lessons back into designs and reference implementations.
  • Ship With Agentic Tooling: Use Claude Claude Code and MCP-connected agents as everyday parts of your workflow across design code generation code review and operations.
  • Contribute to Quality: Participate in code review testing incident response and our design-doc culture and help raise the teams engineering bar.
What Youll Bring to the Role
  • Experience: 4 years building production backend systems ideally distributed and highly available.
  • Technical Depth: Proficiency shipping production services in Java and/or Go.
  • Domain Knowledge: Working knowledge of OAuth 2.0 and OIDC and comfort reading and implementing spec-driven code. Familiarity with RFC 8693 token exchange is a plus.
  • Operational Sense: Hands-on experience with service rollouts feature flags observability and incident response.
  • Agentic Fluency: Working familiarity with agentic development tools (e.g. Claude Code MCP servers AI-assisted code review) with a point of view on where they accelerate work.
  • Communication: Clear written and verbal communication and the ability to collaborate across a data plane service and a larger identity control plane.
Extra Credit
  • Experience building or integrating with an MCP server an agent framework or an LLM-facing gateway.
  • Prior work on multi-tenant SaaS platforms.
  • Exposure to identity authorization or edge-of-network services.
  • Active participation in standards work in the agent identity space (MCP OAuth GNAP DCR).
  • Full-stack or frontend experience for the gateways admin and configuration surfaces.

#P

Below is the annual salary range for candidates located in Canada. Your actual salary will depend on factors such as your skills qualifications and addition Okta offers equity (where applicable) bonus and benefits including health dental and vision insurance RRSP with a match healthcare spending telemedicine and paid leave (including PTO and parental leave) in accordance with our applicable plans and policies. To learn more about our Total Rewards program please visit: annual base salary range for this position for candidates located in Canada is between:

$136000 - $187000 CAD

The Okta Experience

We are intentional about connection. Our global community spanning over 20 offices worldwide is united by a drive to innovate. Your journey begins with an immersive in-person onboarding experience designed to accelerate your impact and connect you to our mission and team from day one.

Okta is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race color religion sex sexual orientation gender identity national origin ancestry marital status age physical or mental disability or status as a protected veteran. We also consider for employment qualified applicants with arrest and convictions records consistent with applicable laws.

If reasonable accommodation is needed to complete any part of the job application interview process or onboarding pleaseuse this Form to request an accommodation.

Notice for New York City Applicants & Employees: Okta may use Automated Employment Decision Tools (AEDT) as defined by New York City Local Law 144 that use artificial intelligence machine learning or other automated processes to assist in our recruitment and hiring accordance with NYC Local Law 144 if you are an applicant or employee residing in New York City please
click here to view our full NYC AEDT Notice.


Required Experience:

Senior IC


About Company

The Okta Experience Supporting Your Well-Being Driving Social Impact Developing Talent and Fostering Connection + Community We are intentional about connection. Our global community, spanning over 20 offices worldwide, is united by a drive to innovate. Your journey begins with an imme ... View more

View Profile View Profile