# Manager, Customer Identity, Security Engineering **Company**: Okta **Location**: Dublin **Work arrangement**: hybrid **Experience**: senior **Job type**: full-time **Salary**: €101.000-€138.600 EUR **Category**: Security **Industry**: Technology **Apply**: https://job-boards.greenhouse.io/okta/jobs/8311998?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply **Canonical**: https://yubhub.co/jobs/job_a62286dd-960 ## Description We seek a technical, hands-on Security Engineering Manager to build and lead a security engineering team within Auth0 Customer Identity that secures how we build and use AI. The team's work spans two areas. The first is building security tooling and controls for AI, including gateways and guardrails that secure the use of MCP servers, LLMs, agents, and the systems around them. The second is architecting and reviewing the security of our AI products, working shift-left with engineering and product teams so that security is built in from the start of design instead of added afterward. In this role you will set direction for a team that doesn't just advise on AI risk , it builds the gateway, guardrails, and tooling that enforce secure AI usage, and reviews AI systems early enough to shape their design. Responsibilities: - Hire, lead, coach, and develop a globally distributed team of security engineers (Senior through Staff), building a culture of technical excellence, ownership, and pragmatic security - Define and execute a multi-quarter roadmap for the team, aligned with Customer Identity business goals and Okta's company-wide security strategy, balancing gateway engineering with security review demand - Lead the design and delivery of an internal AI gateway that secures internal AI traffic , including agent, MCP, and LLM access , with authentication and authorization, policy enforcement, guardrails, auditing, and observability - Be hands-on in the team's technical work: contribute to architecture, prototypes, and code, and set the engineering bar for the team - Run an AI security review practice, similar to product security, that assesses AI-enabled features, services, models, and agent/MCP integrations through intake, threat modeling, design review, and actionable remediation guidance - Review and build security controls for AI systems, addressing risks such as prompt injection, insecure tool and agent permissions, data leakage, excessive agency, model and supply-chain risk, and abuse of agentic protocols (MCP, A2A) - Turn recurring review findings into reusable, secure-by-default controls, libraries, and patterns that engineering teams can adopt without a security engineer in the loop - Manage the intake and prioritization of AI security review requests, and decide what the team takes on, defers, or declines in line with capacity - Partner across Product, Engineering, and Identity Security leadership to embed AI security into the development lifecycle - Own and influence high-impact AI security architecture decisions across Auth0 and Okta Customer Identity infrastructure - Communicate risk, progress, and trade-offs clearly to senior leadership, and turn technical findings into clear guidance for engineering and product teams - Manage team health, prioritization, and delivery across remote, distributed time zones Requirements: - You have 3+ years of experience managing security or software engineering teams, with a track record of hiring, developing, and retaining strong engineers - You have 8+ years of experience in security engineering, with a strong foundation in cloud infrastructure and/or product security - You have a hands-on development background in Golang and Node.js, and you remain hands-on, sufficient to design and build micro-services, evaluate prototypes, and contribute code to security tooling and the AI gateway - You have hands-on experience with AI/ML security , attacking, defending, or both (e.g., LLM/prompt-injection attacks, agentic-system or model abuse, adversarial ML) , and an interest in building controls, not just assessing risk - You have experience performing product security or application security reviews, including threat modeling and architecture/design review, ideally applied to AI/LLM-based systems - You have working knowledge of the AI agent / MCP ecosystem and its security implications, and of building secure API or gateway/proxy infrastructure (authentication, authorization, policy enforcement, rate limiting, auditing) - You have working knowledge and hands-on experience with one or more of the following: AWS and/or Azure security, Kubernetes - You have strong knowledge of OWASP security standards and frameworks (including the OWASP Top 10 for LLM Applications) and secure coding best practices - You have a strong foundation in secure software development lifecycle best practices - You have a proven record of setting technical vision, defining multi-quarter strategy, driving architectural consensus, and influencing cross-organizational security initiatives - You have strong written and verbal communication skills, with the ability to turn technical findings into clear guidance for engineering, product, and executive audiences - You have experience leading a globally distributed and remote team across multiple time zones For more fresh new jobs, check out [yubhub.co](https://yubhub.co/). ## Skills ### Required - Golang - Node.js - AI/ML security - cloud infrastructure - product security - OWASP security standards - secure coding best practices ### Nice to have - Adversarial ML - model red-teaming - AI safety research - Identity and access management - workload and agent identity - Full-stack engineering - Site reliability engineering - Governance, risk and compliance --- Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/okta/jobs/8311998?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)