Engineering Manager, Okta Access Gateway

Okta

Secure Every Identity, from AI to HumanIdentity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence.

This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk.

The Opportunity: Okta Access Gateway (OAG)

Enterprises run on a mix of modern cloud services and mission-critical on-premises systems (such as Oracle E-Business Suite, SAP, PeopleSoft, and custom legacy web apps). Okta Access Gateway (OAG) solves the enterprise hybrid cloud challenge by extending Okta’s cloud identity, Adaptive MFA, and Zero Trust security policies to on-premises and legacy applications without requiring custom code changes or traditional VPNs.

As the Engineering Manager for Okta Access Gateway in Toronto, you will lead and grow a team of software engineers building the next generation of our hybrid access and gateway infrastructure. You will partner closely with Product Management, Architecture, Security, and Quality teams to deliver high-throughput, mission-critical security software deployed across multi-cloud and enterprise datacenters globally.

What You’ll Do

• People Leadership & Team Growth

• • Lead, mentor, and empower an engineering team, fostering an inclusive, high-performance, and psychologically safe engineering culture.
• • Drive career progression, goal setting, regular 1:1s, and continuous feedback to help engineers grow their technical and leadership skills.
• • Attract, interview, and hire diverse engineering talent to scale Okta’s engineering presence in Toronto.

• Delivery & Operational Excellence

• • Own the end-to-end execution and delivery of key product roadmap initiatives, balancing feature velocity, technical debt, and software quality.
• • Establish predictable agile delivery cadences (Scrum/Kanban), driving accurate scope estimation, milestone tracking, and stakeholder communication.
• • Champion operational rigor, security standards, high availability, and performance benchmarking for customer-deployed gateway appliances.

• Technical Strategy & Collaboration

• • Partner closely with Product Managers, Technical Architects, and UX designers to define technical roadmaps and product requirements.
• • Participate in architectural reviews, system design proposals, and threat modeling without micromanaging day-to-day code implementation.
• • Guide the team in modernizing gateway capabilities, containerization, deployment automation, and seamless integration with the core Okta Identity Cloud.

What You’ll Bring

• Engineering Leadership: 2+ years of experience formally managing software engineering teams (or 4+ years as a hands-on Lead / Staff Engineer leading complex, multi-engineer projects to delivery).
• Technical Background: 8+ years of total software engineering experience designing and operating enterprise-scale distributed systems or infrastructure products.
• Enterprise Stack

Experience

• Strong background in server-side technologies (e.g., Java / Spring Boot, Go, or C/C++) and distributed systems concepts (concurrency, caching, high throughput, and asynchronous processing).

• Security & Networking Acumen: Solid understanding of network architecture, TLS/SSL, reverse proxies/gateways, HTTP headers, DNS, and cloud environments (AWS, Azure, or GCP).

• Execution & Agile Rigor: Proven track record of managing agile delivery, CI/CD automation pipelines, and cross-functional dependencies across distributed teams.

• Communication: Exceptional verbal and written communication skills with the ability to articulate complex technical trade-offs to both technical and executive stakeholders.

• Bonus Points (Nice to Have)

• Deep knowledge of Identity & Access Management (IAM) and authentication protocols: SAML 2.0, OAuth 2.0 / OIDC, Kerberos / IWA, Header-Based Auth, and FIDO2 / WebAuthn.

• Experience building or operating Reverse Proxies (NGINX / Envoy / HAProxy), API gateways, or Linux-based virtual appliances (OVA / AMI / VHD / Containers).

• Experience with Zero Trust network access (ZTNA) or enterprise hybrid integrations (Oracle, SAP, IBM, Microsoft).

• Experience building or scaling engineering teams in a hybrid/distributed model.

P9206_3561524

Below is the annual salary range for candidates located in Canada. Your actual salary will depend on factors such as your skills, qualifications, and experience. In addition, Okta offers equity (where applicable), bonus, and benefits, including health, dental, and vision insurance, RRSP with a match, healthcare spending, telemedicine, and paid leave (including PTO and parental leave) in accordance with our applicable plans and policies. To learn more about our Total Rewards program, please visit: https://rewards.okta.com/can. The annual base salary range for this position for candidates located in Canada is between:$168,000—$231,000 CAD The Okta Experience

• Supporting Your Well-Being
• Driving Social Impact
• Developing Talent and Fostering Connection + Community

We are intentional about connection. Our global community, spanning over 20 offices worldwide, is united by a drive to innovate. Your journey begins with an immersive, in-person onboarding experience designed to accelerate your impact and connect you to our mission and team from day one.

Okta is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, marital status, age, physical or mental disability, or status as a protected veteran. We also consider for employment qualified applicants with arrest and convictions records, consistent with applicable laws.

If reasonable accommodation is needed to complete any part of the job application, interview process, or onboarding please use this Form to request an accommodation.

Notice for New York City Applicants & Employees: Okta may use Automated Employment Decision Tools (AEDT), as defined by New York City Local Law 144, that use artificial intelligence, machine learning, or other automated processes to assist in our recruitment and hiring process. In accordance with NYC Local Law 144, if you are an applicant or employee residing in New York City, please click here to view our full NYC AEDT Notice.

Individuals seeking employment at this company are considered without regards to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, or sexual orientation. When submitting your application above, you are being given the opportunity to provide information about your race/ethnicity, gender, and veteran status.

Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Pay Transparency

Okta complies with all applicable federal, state, and local pay transparency rules. For additional information about the federal requirements, click here.