Senior Software Engineer, Agent Gateway
Okta INC · 🇨🇦 Toronto, Ontario, Canada
Sponsorship verdict
No sponsorship evidence yet
No government record and no wording either way. Not a refusal — ask the recruiter.
- No government sponsor record hereNo government sponsor record covers this employer in this country.
- The posting doesn’t mention sponsorshipSilence isn’t a refusal — ask the recruiter before investing much time.
- No salary bar for this routeCanada has no single salary bar: the employer usually needs a positive LMIA. Pay at or above the provincial median wage + 20% (e.g. C$36.92/h in Ontario) puts it in the high-wage stream. Source: https://www.canada.ca/en/employment-social-development/services/foreign-workers/median-wage.html, rules effective 2026-07-17.
- Confirmed live todayWhen a source last listed this job as open.
Canada: Express Entry no longer awards ranking points for job offers (since 25 Mar 2025); a job offer still counts toward Federal Skilled Worker eligibility.
A verdict summarises public evidence; it is not legal advice and never a guarantee — the employer and the immigration authority decide. Sign in to factor in where you can already work.
Or apply yourself on the official page →
Why not apply?
No register record and no sponsorship wording in the posting. Worth asking the employer before investing significant time.
SponsorApply flags time-wasters so your applications go where they can land. These come from the posting's own wording — read the original listing to confirm. See better-fit alternatives →
Sponsor Radar — Okta INC
No government sponsor record covers this employer in this country.
Past sponsorship or register membership never guarantees sponsorship for this vacancy or for you. Full Sponsor Radar for Okta INC →
About the role
Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. The Agent Gateway Team The Agent Gateway team owns the identity-aware infrastructure that connects enterprise AI agents to the tools, data, and services their organizations authorize. Every call from Claude, Agentforce, Codex, and internal/homegrown agents to a resource flows through us. We enforce authorization, isolate credentials, mint the right token per target, and produce the audit trails that security teams rely on. We are early in a rapidly evolving space. The standards for agent identity (MCP, OAuth token exchange, DCR) are being built under our feet. Our roadmap includes hardening the data plane for on-premises customer deployments, extending policy semantics beyond tool-level allowlists, adding native support for Agent-to-Agent brokered delegation, and scaling to tenants with thousands of virtual MCP servers. The Senior Software Engineer Opportunity Okta is looking for a Senior Software Engineer to help build the Agent Gateway. You will own features and components across the data and control planes, turning technical designs and product requirements into reliable production systems. Working alongside staff engineers, you will implement token exchange, request routing, credential resolution, and policy evaluation as agent identity specifications evolve. This is a hands-on software development role at the intersection of product, security, and infrastructure. You will ship services that handle agentic traffic reliably and performantly at scale. What You'll Be Doing • Build and Ship: Own the implementation of gateway features end-to-end — from virtual MCP server aggregation to token exchange and policy evaluation — with tests, observability, and operational readiness built in. • Work in the Runtime Path: Write code that handles credentials, tokens, tenant isolation, and audit logging with care. The gateway sits in the critical path for customer agent traffic, so correctness and reliability matter on every change. • Implement the Protocols: Read and implement MCP, OAuth token exchange, and agent identity specifications, and feed production lessons back into designs and reference implementations. • Ship With Agentic Tooling: Use Claude, Claude Code, and MCP-connected agents as everyday parts of your workflow across design, code generation, code review, and operations. • Contribute to Quality: Participate in code review, testing, incident response, and our design-doc culture, and help raise the team's engineering bar. What You'll Bring to the Role • Experience: 4+ years building production backend systems, ideally distributed and highly available. • Technical Depth: Proficiency shipping production services in Java and/or Go. • Domain Knowledge: Working knowledge of OAuth 2.0 and OIDC, and comfort reading and implementing spec-driven code. Familiarity with RFC 8693 token exchange is a plus. • Operational Sense: Hands-on experience with service rollouts, feature flags, observability, and incident response. • Agentic Fluency: Working familiarity with agentic development tools (e.g., Claude Code, MCP servers, AI-assisted code review), with a point of view on where they accelerate work. • Communication: Clear written and verbal communication, and the ability to collaborate across a data plane service