Jobs / United States / Okta INC
Staff Software Engineer, Agent Gateway
Okta INC · 🇺🇸 San Francisco, California
Sponsorship verdict
Sponsorship possible
One solid signal, not two — worth applying, and worth asking about sponsorship early.
- Employer is on a government sponsor recordThe US Department of Labor certified 93 H-1B/E-3 labor condition applications for this employer between Oct 2025 and Jun 2026 (latest Jun 2026) — the step every H-1B hire needs first. USCIS also records 52 H-1B approvals in FY2023. Source: LCA disclosure data (US Department of Labor (OFLC)).
- The posting doesn’t mention sponsorshipSilence isn’t a refusal — ask the recruiter before investing much time.
- No salary bar for this routeH-1B has no fixed salary bar: the employer must pay at least the prevailing wage for the role and area. Cap-subject employers enter a lottery weighted by wage level. Source: https://www.federalregister.gov/documents/2025/12/29/2025-23853/weighted-selection-process-for-registrants-and-petitioners-seeking-to-file-cap-subject-h-1b, rules effective 2026-02-27.
- What Okta INC paid sponsored hires in similar roles20 certified filings for “Senior Software Engineer” (Software Developers) in CA: $167k–$214k, median $180k. Most were filed at wage level IV (75%) — 4 lottery entries, ≈61% projected selection odds for cap-subject employers. Source: US Department of Labor LCA disclosure data (Oct 2025 – Jun 2026).
- Confirmed live todayWhen a source last listed this job as open.
US H-1B: cap-subject employers enter a lottery weighted by wage level — Level I gets 1 entry, Level IV gets 4 (DHS projected selection odds ≈15% at Level I to ≈61% at Level IV). Universities and non-profit research employers are cap-exempt. The $100,000 fee for new petitions from abroad is currently blocked by a court order (appeal pending).
A verdict summarises public evidence; it is not legal advice and never a guarantee — the employer and the immigration authority decide. Sign in to factor in where you can already work.
Or apply yourself on the official page →
Sponsor Radar — Okta INC
The US Department of Labor certified 93 H-1B/E-3 labor condition applications for this employer between Oct 2025 and Jun 2026 (latest Jun 2026) — the step every H-1B hire needs first. USCIS also records 52 H-1B approvals in FY2023. Source: LCA disclosure data (US Department of Labor (OFLC)).
Past sponsorship or register membership never guarantees sponsorship for this vacancy or for you. Full Sponsor Radar for Okta INC →
About the role
Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. The Agent Gateway Team The Agent Gateway team owns the identity-aware infrastructure that connects enterprise AI agents to the tools, data, and services their organizations authorize. Every call from Claude, Agentforce,, Codex, and internal/homegrown agents to a resource flows through us. We enforce authorization, isolate credentials, mint the right token per target, and produce the audit trails that security teams rely on. We are early in a rapidly evolving space. The standards (MCP, XAA, ID JAG, DCR for agents,CIMD) are being built under our feet. Our roadmap includes hardening the data plane for on-premises customer deployments, extending policy semantics beyond tool-level allowlists, adding native support for Agent-to-Agent brokered delegation, XAA and scaling to tenants with thousands of virtual MCP servers. The Staff Software Engineer Opportunity Okta is looking for a Staff Software Engineer to serve as a technical anchor for the Agent Gateway team. You will own critical parts of the data and control planes and drive architectural design as the MCP and agent identity specs evolve. In this role, you will work close to the metal on request routing, token exchange, credential resolution, and policy evaluation. You will work equally close to the identity control plane on config bundles, tenant fanout, and operational rollouts. You are expected to make sharp technology choices, prototype with agentic tooling, and turn rough product ideas into production-ready systems. You will have the opportunity to build and scale services used by agentic traffic, ensuring workflows are reliable and performant at an unprecedented scale. This role sits at the critical intersection of product, security, and infrastructure. What You’ll Be Doing • Architect and Lead: Own the end-to-end design and delivery of major gateway capabilities, from virtual MCP server aggregation to Agent-to-Agent brokered delegation, as well as on-premises deployment models. • Design for Security and Runtime: Set the standard for how the gateway handles credentials, tokens, tenant isolation, and audit logging. Every decision carries direct customer trust and compliance weight. The Gateway team sits in the path of agent runtime traffic, which is in the critical path for customers. • Move With the Protocols: Track and shape MCP, OAuth token exchange, and agent identity specifications. Feed lessons learned from production back into the specs and their reference implementations. • Ship With Agentic Tooling: Treat Claude, Claude Code, and MCP-connected agents as first-class parts of your engineering workflow. Set the pattern for how the team uses these tools across design, code generation, code review, and operations—including custom skills, subagents, and MCP servers that accelerate the entire team. • Raise the Bar: Drive code review, testing standards, incident retrospectives, and our design doc culture. Mentor engineers on the team and foster alignment across adjacent groups What You’ll Bring to the Role • Experience: 7+ years building distributed, highly available production backend systems. • Technical Depth: Hands-on experience shipping production services in Java and/or Go. • Domain Expertise: Strong grounding in OAuth 2.0, OIDC, and RFC 8693