Principal Product Manager, IAM Security & Agentic Identity

Okta is hiring a Principal Product Manager to lead Identity Security and Agentic Identity from our Bellevue, WA hub in a hybrid setup. This role offers a salary in the range of USD 217,000 - 298,000 per year and the opportunity to shape internal adoption and strategic direction across Okta and Auth0 products, guiding features from Alpha through Early Availability.

Benefits

• Supporting Your Well-Being
• Driving Social Impact
• Developing Talent and Fostering Connection + Community

The Okta Experience

• Supporting Your Well-Being
• Driving Social Impact
• Developing Talent and Fostering Connection + Community

Responsibilities

• Shape and refine the strategic roadmap for the Identity Security portfolio, acting as a primary stakeholder who prioritizes Okta and Auth0 roadmaps based on internal deployment insights.
• Manage the Alpha to Early Availability lifecycle, ensuring internal IAM teams test features and provide real-time SDLC feedback, and drive internal adoption through EA rollout.
• Design the rollout blueprint and external product strategy for how Okta DBSSO and Chrome DBSC complement one another to create a layered defense against token and cookie exfiltration.
• Define guardrails for deploying AI Agents both internally and externally, ensuring secure integration via identity gateways, downscoped runtime permissions, and an auditable trail.
• Serve as the primary liaison between business units, development, and engineering teams; lead planning sessions, draft comprehensive PRDs and user stories, and prioritize features within Scrum or Kanban workflows.
• Define KPI-driven reporting to provide the VP of IAM and executive leadership with visibility into portfolio scope, security coverage, and testing velocity for human and non-human identities.
• Lead strategy for governing non-human autonomous AI workloads across the product ecosystem, including O4AA (Okta for AI Agents) and A4AA (Auth0 for AI Agents) with Next-Gen Guardrails.
• Architect the defense against session cookie theft by leveraging hardware-bound tokens, owning the strategy for Okta Device Bound SSO (DBSSO) and Google Chrome Device Bound Session Credentials (DBSC).
• Integrate Identity Threat Protection (ITP) for continuous risk evaluation and Identity Security Posture Management (ISPM) to expose and remediate risks across human and machine identities.

Requirements

• Demonstrated success at the Principal level in Product Management, Technical Program Management, or Enterprise Architecture. IAM experience, developer platforms (like Auth0), enterprise security, or machine-to-machine infrastructure is highly valued, with leadership by influence as a core strength.
• Strong conceptual and technical understanding of AI agents, LLM applications, security gateways, and developer APIs that handle authentication, authorization, and modern patterns such as MCP and OAuth 2.0.
• Solid knowledge of identity threat vectors (AiTM phishing, info-stealer malware, session hijacking) and how cryptographic hardware-binding (TPM, Secure Enclave) protects session state.
• Proven ability to influence product roadmaps and engineering priorities across a highly matrixed, global organization without direct reporting authority.
• Exceptional analytical and problem-solving skills with the ability to derive concrete action plans from ambiguous or conflicting inputs.
• Elite presentation and written communication capabilities, with confidence briefing executive leadership and translating technical architecture into business value.

Technologies

• Auth0
• OAuth 2.0
• Model Context Protocol (MCP)
• O4AA
• A4AA
• DBSSO
• Chrome DBSC
• Identity Threat Protection (ITP)
• Identity Security Posture Management (ISPM)
• TPM
• Secure Enclave