{"id":1596971,"url":"https://alion.io/job/okta-principal-machine-learning-engineer-secureai","title":"Principal Machine Learning Engineer, SecureAI","company":{"id":4990,"name":"Okta","domain":"okta.com","url":"https://alion.io/company/okta","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":87,"open_postings":92,"ghost_share":0,"stale_share":0.533,"repost_share":0,"time_to_fill_p50_days":50,"computed_at":"2026-10-05T05:45:15Z"}},"role":"AI/ML","role_family":"AI/ML","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Toronto, Canada"],"countries":["CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":109000,"max_usd":219000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":19},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Anthropic","optional":false},{"name":"API Gateway","optional":false},{"name":"AWS","optional":false},{"name":"AWS Bedrock","optional":false},{"name":"Claude","optional":false},{"name":"Embeddings","optional":false},{"name":"FastAPI","optional":false},{"name":"Fine-tuning","optional":false},{"name":"Go","optional":false},{"name":"LangChain","optional":false},{"name":"LangGraph","optional":false},{"name":"LiteLLM","optional":false},{"name":"LlamaIndex","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Machine Learning","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"Okta","optional":false},{"name":"OpenAI","optional":false},{"name":"Python","optional":false},{"name":"PyTorch","optional":false},{"name":"RAG","optional":false},{"name":"Spark","optional":false},{"name":"Structured Outputs","optional":false},{"name":"TensorFlow","optional":false},{"name":"TypeScript","optional":false},{"name":"Synthetic Data","optional":true}],"status":"live","first_seen_at":"2026-09-16T22:30:47Z","employer_posted_date":"2026-10-01","last_verified_at":"2026-10-05T22:01:42Z","board_verified":true,"closed_at":null,"days_open":19,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":19},"description":"Secure Every Identity, from AI to Human\n Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence.\nThis is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk.\nAbout Okta Secures AI Team\n The Okta for AI Agents Team is building the future of digital identity management. The way companies are using agents and allowing them access is undergoing a fundamental shift, enabling teams to move fast while staying secure. \nOur North Star is clear: To get AI right, you have to get identity right. We are not just managing identities; we are building the industry's first Identity Security Fabric for the agentic era. As organizations rapidly deploy AI, these non-human entities are acting with access to critical tools, often bypassing traditional perimeters and creating a 'Shadow AI' crisis. Our mission is to move identity from a reactive gatekeeper to a unified control plane, transforming AI risk into business ROI.\nWe are tackling this by implementing a comprehensive four-pillar maturity model: Discover, Onboard, Protect, and Govern. We are driving innovation by defining the standards for Agentic Identity-including pioneer work with securing AI Agents and support for protocols like MCP. You will be helping us build the infrastructure that allows enterprises to scale AI safely, ensuring every access decision-whether made by a human or an automated agent-is authenticated, authorized, and audited at scale.\nWe are a diverse team of engineers, product managers, and designers who are bringing Okta’s expertise in identity to define the future of Agent Identity management, focusing on enablement while staying secure.\nAbout the role\nIn this role, you will join the Agent Access Policies sub-team under Okta Secures AI as a Principal Machine Learning (ML) Engineer to advance Okta's authorization capabilities. By replacing static, rule-based systems with dynamic AI security mechanisms, you will deliver real-time threat inspection, agent intent evaluation, and behavioral analysis-ensuring autonomous AI agents operate safely within specified bounds.\nYour core mission will be architecting and driving features for our unified control plane to establish the premier Identity Security Fabric for the agentic era. In doing so, you will help execute our guiding principle: \"To get AI right, you have to get identity right.\"\nWhat you’ll be doing \nImplement intent-based enforcement to verify agent runtime requests match their intended purpose, requiring key capabilities.\nApply LLM reasoning and prompt parsing to interpret prompts, tool payloads, and intent in real time.\nIntegrate low-latency inference or semantic evaluation engines directly into the API gateway request path.\nUse embeddings, vector search, or zero-shot classification to score alignment between agent intent and executed actions.\nDesign confidence-scored decision engines that feed semantic verification results into policy frameworks (e.g., Cedar).\nEstablish evaluation benchmarks, prompt injection defenses, and guardrails to prevent bypasses or false positives.\nArchitect scalable ML and Generative AI systems integrating retrieval, inference, and evaluation pipelines.\nOptimize prompting, context retrieval, and RAG workflows for accuracy, safety, and efficiency in Claude-based systems.\nBuild automated evaluation pipelines to measure model quality, correctness, groundedness, and safety in production.\nImplement schema validation, structured output enforcement, and guardrails to ensure reliable, compliant AI outputs.\nMentor and coach engineers to support team and community growth.\nWhat you’ll bring to the role\n10+ years of software development experience, with strong programming expertise in Python (and familiarity with Go or Typescript a plus).\nHands-on experience with applied machine learning, from feature engineering to training and fine-tuning models.\nHands-on experience with modern Generative AI platforms (AWS Bedrock, OpenAI, Anthropic, etc.).\nDeep understanding of retrieval-augmented generation (RAG), embeddings, and knowledge-base workflows.\nHands-on experience with LiteLLM, LangGraph, LangChain, LlamaIndex, MCP, or other related AI agent frameworks.\nFamiliarity with ML frameworks (FastAPI, PyTorch, TensorFlow, Spark ML) and workflow orchestration tools (Airflow, etc.).\nExperience defining evaluation metrics, pipelines, and feedback loops for ML/GenAI systems.\nProven ability to collaborate with product and engineering teams to drive greenfield initiatives forward, navigate unknowns, and iterate quickly and frequently.\nExperience building tools or infrastructure for AI/ML applications, with a deep understanding of the developer lifecycle in an AI-native world. \nExtra credit\nExperience integrating AI-driven systems with identity, authentication, or security products.\nExposure to ethical AI, model risk, or compliance frameworks.\nFamiliarity with evaluation datasets, synthetic data generation, or LLM-as-a-judge methods.\nEducation:Bachelor’s or Master's degree in Computer Science or related field\n(P25822_3552624)\nBelow is the annual base salary range for candidates located in San Francisco Bay Area. Your actual base salary will depend on factors such as your skills, qualifications, experience, and work location. In addition, Okta offers equity (where applicable), bonus, and benefits, including health, dental and vision insurance, 401(k), flexible spending account, and paid leave (including PTO and parental leave) in accordance with our applicable plans and policies. To learn more about our Total Rewards program please visit:https://rewards.okta.com/us. \nThe annual base salary range for this position for candidates located in the San Francisco Bay area is between:\n$192,000—$264,000 CAD\nThe Okta Experience\nSupporting Your Well-Being \nDriving Social Impact \nDeveloping Talent and Fostering Connection + Community\nWe are intentional about connection. Our global community, spanning over 20 offices worldwide, is united by a drive to innovate. Your journey begins with an immersive, in-person onboarding experience designed to accelerate your impact and connect you to our mission and team from day one.\nOkta is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, marital status, age, physical or mental disability, or status as a protected veteran. We also consider for employment qualified applicants with arrest and convictions records, consistent with applicable laws.\nIf reasonable accommodation is needed to complete any part of the job application, interview process, or onboarding please use this Form to request an accommodation.\nNotice for New York City Applicants & Employees: Okta may use Automated Employment Decision Tools (AEDT), as defined by New York City Local Law 144, that use artificial intelligence, machine learning, or other automated processes to assist in our recruitment and hiring process. In accordance with NYC Local Law 144, if you are an applicant or employee residing in New York City, please click here to view our full NYC AEDT Notice.","description_format":"text","description_chars":7510,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity","Parental leave","Vision insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Identity Management","E-learning"],"lifecycle":[{"event":"open","at":"2026-10-01T18:15:48Z"}],"visa":[{"country":"CA","licensed_sponsor":true,"evidence":"Positions approved through LMIA in 12 months: 2","filings_12m":2,"filings_prev_12m":5,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"High Wage","cap_exempt":false,"checked_at":"2026-10-03T21:10:52+00:00","sources":["ESDC: employers issued a positive LMIA"],"filings_for_role_12m":2}],"liveness":{"score":55,"band":"ok","label":"Likely open","p_open":1,"p_active":0.614,"p_room":0.9,"age_days":18,"expected_fill_days":50,"reasons":["conf:1","stale_co","velocity","win:mid","comp:brand"],"computed_at":"2026-10-05T05:45:15Z"},"pay":null,"html_url":"https://alion.io/job/okta-principal-machine-learning-engineer-secureai","json_url":"https://alion.io/job/okta-principal-machine-learning-engineer-secureai.json","meta":{"generated_at":"2026-10-06T00:01:43Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":20,"day_limit":5000,"remaining_today":4980,"minute_limit":60,"resets_at":"2026-10-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4990},"rest":"https://alion.io/mcp/rest/get_company?id=4990"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fokta-principal-machine-learning-engineer-secureai"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fokta-principal-machine-learning-engineer-secureai"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fokta-principal-machine-learning-engineer-secureai"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/okta-principal-machine-learning-engineer-secureai\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fokta-principal-machine-learning-engineer-secureai"}]}