Staff/Principal Identity Engineer

Job summary

Responsibilities

We are looking for a hands-on Staff/Principal Identity Engineer to own Legora's Okta platform and build the security controls that protect our employees, applications, devices and data.

• Full ownership of Okta: Own the platform roadmap, architecture, configuration, security posture, integrations, change management and operational reliability.
• Authentication and application integrations: Design and troubleshoot SSO, SAML, OIDC, OAuth and SCIM integrations.
• Identity lifecycle and access governance: Build reliable joiner, mover and leaver workflows connecting HR systems, Okta, directories and business applications.
• Identity engineering and automation: Deliver opinionated, practical identity solutions using Python, Okta APIs, Workflows and other appropriate tools.
• Non-human identity and agent authorization: Establish ownership, least privilege, credential lifecycle and revocation for service accounts, API tokens, integrations and AI…

What they're looking for

• HR-driven identity modernization, Workday integrations, Active Directory retirement or directory consolidation.
• Self-service application onboarding.
• Identity governance and privileged access.
• Non-human identity, AI-agent or MCP security.
• Okta certifications are useful, but demonstrated engineering depth and ownership matter most.

Tech stack

• Python
• Terraform