Senior Software Engineer, Agent Gateway at Okta in Toronto, Ontario, Canada

Job description

• Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence.
• This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk.
• Okta is looking for a Senior Software Engineer to help build the Agent Gateway. You will own features and components across the data and control planes, turning technical designs and product requirements into reliable production systems. Working alongside staff engineers, you will implement token exchange, request routing, credential resolution, and policy evaluation as agent identity specifications evolve.
• This is a hands-on software development role at the intersection of product, security, and infrastructure. You will ship services that handle agentic traffic reliably and performantly at scale.

Responsibilities

• Build and Ship: Own the implementation of gateway features end-to-end — from virtual MCP server aggregation to token exchange and policy evaluation — with tests, observability, and operational readiness built in.
• Work in the Runtime Path: Write code that handles credentials, tokens, tenant isolation, and audit logging with care. The gateway sits in the critical path for customer agent traffic, so correctness and reliability matter on every change.
• Implement the Protocols: Read and implement MCP, OAuth token exchange, and agent identity specifications, and feed production lessons back into designs and reference implementations.
• Ship With Agentic Tooling: Use Claude, Claude Code, and MCP-connected agents as everyday parts of your workflow across design, code generation, code review, and operations.
• Contribute to Quality: Participate in code review, testing, incident response, and our design-doc culture, and help raise the team's engineering bar.

Requirements

• Experience: 4+ years building production backend systems, ideally distributed and highly available.
• Technical Depth: Proficiency shipping production services in Java and/or Go.
• Domain Knowledge: Working knowledge of OAuth 2.0 and OIDC, and comfort reading and implementing spec-driven code. Familiarity with RFC 8693 token exchange is a plus.
• Operational Sense: Hands-on experience with service rollouts, feature flags, observability, and incident response.
• Agentic Fluency: Working familiarity with agentic development tools (e.g., Claude Code, MCP servers, AI-assisted code review), with a point of view on where they accelerate work.
• Communication: Clear written and verbal communication, and the ability to collaborate across a data plane service and a larger identity control plane.
• Experience building or integrating with an MCP server, an agent framework, or an LLM-facing gateway.
• Prior work on multi-tenant SaaS platforms.
• Exposure to identity, authorization, or edge-of-network services.
• Active participation in standards work in the agent identity space (MCP, OAuth, GNAP, DCR).
• Full-stack or frontend experience for the gateway's admin and configuration surfaces.

Skills

Required

• Java
• Go
• OAuth 2.0
• OIDC
• Spec-driven development
• Service rollouts
• Feature flags
• Observability
• Incident response
• Clear written and verbal communication
• Collaboration

Preferred

• MCP server
• Agent framework
• LLM-facing gateway
• Multi-tenant SaaS platforms
• Full-stack or frontend experience

Benefits

• Below is the annual salary range for candidates located in Canada. Your actual salary will depend on factors such as your skills, qualifications, and experience. In addition, Okta offers equity (where applicable), bonus, and benefits, including health, dental, and vision insurance, RRSP with a match, healthcare spending, telemedicine, and paid leave (including PTO and parental leave) in accordance with our applicable plans and policies. To learn more about our Total Rewards program, please visit: https://rewards.okta.com/can.
• The annual base salary range for this position for candidates located in Canada is between:$136,000—$187,000 CAD