{"id":2998739,"url":"https://alion.io/job/webflow-lead-platform-engineer-identity-access","title":"Lead Platform Engineer, Identity & Access","company":{"id":1295,"name":"Webflow","domain":"webflow.com","url":"https://alion.io/company/webflow","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":75,"open_postings":5,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":46,"computed_at":"2026-10-26T05:57:25Z"}},"role":"DevOps","role_family":"DevOps","seniority":"lead","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":232000,"max":290000,"currency":"USD","period":"year","gross":null,"usd_annual":290000},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"JavaScript","optional":false},{"name":"Least Privilege","optional":false},{"name":"Okta","optional":false},{"name":"Python","optional":false},{"name":"Terraform","optional":false},{"name":"Webflow","optional":false},{"name":"Zero Trust","optional":false},{"name":"Wi-Fi","optional":true}],"status":"live","first_seen_at":"2026-10-20T18:49:18Z","employer_posted_date":"2026-10-20","last_verified_at":"2026-10-26T11:06:17Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"Webflow is the agentic web marketing platform for modern marketing teams, helping organizations build, manage, and optimize high-performing web experiences that drive predictable growth and strengthen brand trust. Building at Webflow will need grit, because we move fast, without ever sacrificing craft or quality.\nWebflow is looking for a Lead Platform Engineer, Identity & Access to own how our workforce, devices, and automations authenticate and get access to what they need. Okta is our primary identity platform, and you’ll take it from a tool that works to a platform that is deliberately architected, governed, and easy to build on.\nYou’ll partner extensively with Security on policy, risk, and detection, bringing the engineering depth to turn their requirements into systems that run reliably. Making access safe by default without slowing people down is the central challenge of the role.\nAbout the role:\nLocation: Remote-first (United States)\n\nFull-time\n\nPermanent\n\nExempt\n\nThe cash compensation for this role is tailored to align with the cost of labor in different geographic markets. We've structured the base pay ranges for this role into zones for our geographic markets, and the specific base pay within the range will be determined by the candidate’s geographic location, job-related experience, knowledge, qualifications, and skills.\nUnited States (all figures cited below are in USD and pertain to workers in the United States)\nZone A: $232,000 - 290,000\n\nZone B: $217,600 - 272,000\n\nZone C: $204,800 - 256,000\n\nThis role is also eligible to participate in Webflow's company-wide bonus program. Target amounts are a percentage of base salary and vary by career level. Payouts are based on company performance against established financial and operational goals.\nPlease visit our Careers page for more information on which locations are included in each of our geographic pay zones. However, please confirm the zone for your specific location with your recruiter.\nApplication Information:\nApplication deadline: applications accepted on an ongoing basis until position is closed and filled\n\nThis posting is for a new position\n\nReporting to the Senior Director, Information Technology\n\nAs a Lead Platform Engineer, Identity & Access, you’ll:\nOwn the identity architecture and roadmap for workforce identity, with Okta as the core platform, including build versus buy decisions\n\nBring our Okta tenant under proper management, with configuration standards, hardening, change control, and configuration as code (Terraform, APIs, Okta Workflows, or scripts where the platform falls short)\n\nAutomate the identity lifecycle from joiner to leaver, using our HRIS as the source of truth and SCIM to downstream applications\n\nBuild paved roads for application onboarding, including standard SSO patterns, provisioning templates, and federated access to our cloud and source control platforms, so app owners can integrate without platform team involvement\n\nDesign the access model: role based access control (RBAC), least privilege, request and approval workflows, and access reviews, with tooling that answers “who has access to what, and why” and produces audit evidence automatically\n\nStrengthen how access is granted through phishing resistant MFA, device trust and risk signals, and governed non human identities (service accounts, tokens, OAuth grants, and AI tools and agents), and stream identity telemetry to Security for detection and response\n\nServe as the top escalation point and primary responder for identity incidents and outages should they arise, including on call coverage for critical identity services, post incident reviews, and log analysis with Security\n\nManage the Okta vendor relationship, licensing, and cost\n\nAbout you:\nRequirements:\nMinimum of 8 years in identity, platform, or infrastructure engineering, including ownership of a workforce identity platform at meaningful scale\n\nDeep hands on experience architecting an enterprise identity provider, with Okta strongly preferred\n\nFluency in SAML, OIDC, OAuth 2.0, and SCIM, including debugging at the token and assertion level\n\nExperience with identity governance, including RBAC design, HRIS driven lifecycle automation, and meeting audit requirements\n\nStrong grounding in Zero Trust and identity based attacks, including device trust and the security of non human identities\n\nScripting ability (Python, JavaScript, or similar) and infrastructure as code experience, such as Terraform\n\nClear communication with senior and executive audiences, including driving architecture decisions\n\nNice to have: experience governing identities for AI tools and agents, and Okta certifications\n\nYou’ll thrive as a Lead Platform Engineer, Identity & Access if you:\nDesign like an attacker, asking how every control could fail or be abused, and respect that one policy change can lock out the whole company\n\nGet results with Security, HR, and application owners through influence, not authority\n\nCare as much about adoption as correctness\n\nBring order to an under managed environment without waiting for a perfect plan\n\nUse AI tools with good judgment\n\nAre comfortable as the lead identity expert, mentoring others and setting the standard\n\nStay curious and open to growth - demonstrating a proactive embrace of AI, and actively building and applying fluency in emerging technologies to elevate how we work, drive faster outcomes, and expand collective impact.\n\nOur Core Behaviors\nBuild lasting customer trust. We build trust by taking action that puts customer trust first.\n\nWin together. We play to win, and we win as one team. Success at Webflow isn't a solo act.\n\nReinvent ourselves. We don't just improve what exists, we imagine what's possible.\n\nOwn it all the way. We move fast because the moment demands it, and we hold ourselves accountable to deliver outcomes - for each other, and for customers.\n\nBenefits\nOwnership in what you help build. Every permanent Webflower receives equity (RSUs) in our growing, privately held company.\n\nHealth coverage that actually covers you. Comprehensive medical, dental, and vision plans for full-time employees and their dependents, with Webflow covering most premiums.\n\nSupport for every stage of family life. 12 weeks of paid parental leave for all parents and 6+ weeks of additional paid leave for birthing parents. Plus inclusive care for family planning, menopause, and midlife transitions.\n\nTime off that’s actually off. Flexible vacation, paid holidays, and a sabbatical program to help you recharge and come back inspired.\n\nWellness for the whole you. Access to mental health resources, therapy and coaching.\n\nInvest in your future. A 401(k) with 100% employer match (up to $6,000/year) in the U.S., and support for retirement savings globally.\n\nMonthly stipends that flex with your life. Localized support for work and wellness expenses - from Wi-Fi to workouts.\n\nBonus for building together. All full-time, permanent, non-commission employees are eligible for our annual WIN bonus program.\n\nTemporary employees may be eligible for paid holiday and time off, statutory leaves of absence, and company-sponsored medical benefits depending on their Fixed Term Contract and their country/state of employment.\nBe you, with us\nAt Webflow, equality is a core tenet of our culture. We are an Equal Opportunity (EEO)/Veterans/Disabled Employer and are committed to building an inclusive global team that represents a variety of backgrounds, perspectives, beliefs, and experiences. Employment decisions are made on the basis of job-related criteria without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other classification protected by applicable law. Pursuant to the San Francisco Fair Chance Ordinance, Webflow will consider for employment qualified applicants with arrest and conviction records.\nStay connected\nNot ready to apply, but want to be part of the Webflow community? Consider following our story on our Webflow Blog, LinkedIn, X (Twitter), and/or Glassdoor.\nPlease note:\nWe will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Upon interview scheduling, instructions for accommodation requests will be administered.\nTo join Webflow, you'll need a valid right to work authorization depending on the country of employment.\nIf you are extended an offer, that offer may be contingent upon your successful completion of a background check, which will be conducted in accordance with applicable laws. We may obtain one or more background screening reports about you, solely for employment purposes.\nWebflow uses AI tools to assist in screening and evaluating applications. AI does not make final hiring decisions. For details on how we process your personal information, see Webflow’s Applicant Privacy Notice.","description_format":"text","description_chars":9002,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Parental leave"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["CMS & Digital Experience Platforms","Web Design","Website Builders"],"lifecycle":[{"event":"open","at":"2026-10-21T11:33:46Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 6","filings_12m":6,"filings_prev_12m":9,"green_card_filings_12m":0,"median_offered_wage_usd":212500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":5}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":5,"expected_fill_days":46,"reasons":["conf:3","velocity","win:early"],"computed_at":"2026-10-26T05:57:25Z"},"pay":{"stated_usd_annual":290000,"is_top_pay":true},"html_url":"https://alion.io/job/webflow-lead-platform-engineer-identity-access","json_url":"https://alion.io/job/webflow-lead-platform-engineer-identity-access.json","meta":{"generated_at":"2026-10-26T12:57:15Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":17904,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-27T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1295},"rest":"https://alion.io/mcp/rest/get_company?id=1295"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fwebflow-lead-platform-engineer-identity-access"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fwebflow-lead-platform-engineer-identity-access"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fwebflow-lead-platform-engineer-identity-access"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/webflow-lead-platform-engineer-identity-access\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fwebflow-lead-platform-engineer-identity-access"}]}