205K–290K USD / year
Lead Platform Engineer, Identity & Access
DevOpsRemote — United States
Published on 2026-10-20
These details were extracted automatically from the original listing. They may not be complete or fully up to date — it's worth checking the original job post.
About this role
Lead the architecture and roadmap for Webflow’s workforce identity and access platform, with Okta as its core. Build secure, reliable identity systems and automation that make access safe by default while remaining easy for employees and application owners to use.
About the company
Webflow is a visual website design and CMS platform that lets teams build and publish production websites without hand-coding the front end.
The team
Information Technology, reporting to the Senior Director of Information Technology.
Stack
OktaTerraformSCIMSAMLOIDCOAuth 2.0PythonJavaScript
What you'll do
- Own the workforce identity architecture, roadmap, and build-versus-buy decisions.
- Establish Okta configuration standards, hardening, change control, and infrastructure as code.
- Automate joiner-to-leaver identity lifecycle processes using HRIS data and SCIM.
- Create reusable SSO, provisioning, and federated-access patterns for application owners.
- Design RBAC, least-privilege access, approval workflows, access reviews, and audit evidence.
- Strengthen MFA, device trust, risk signals, and governance of non-human identities.
- Respond to identity incidents and outages, including on-call coverage and post-incident reviews.
- Manage the Okta vendor relationship, licensing, and costs.
What we're looking for
- At least 8 years in identity, platform, or infrastructure engineering, including workforce identity platform ownership at scale.
- Hands-on enterprise identity provider architecture experience; Okta strongly preferred.
- Fluency in SAML, OIDC, OAuth 2.0, and SCIM, including token- and assertion-level debugging.
- Experience with identity governance, RBAC, HRIS-driven lifecycle automation, and audit requirements.
- Understanding of Zero Trust, identity-based attacks, device trust, and non-human identity security.
- Scripting skills in Python, JavaScript, or a similar language, and infrastructure as code experience such as Terraform.
- Ability to communicate with senior and executive audiences and drive architecture decisions.
Nice to have
- Experience governing identities for AI tools and agents.
- Okta certifications.
Benefits
- RSU equity for permanent employees.
- Comprehensive medical, dental, and vision coverage, with Webflow covering most premiums.
- 12 weeks of paid parental leave, plus 6 or more additional weeks for birthing parents.
- Flexible vacation, paid holidays, and a sabbatical program.
- 401(k) with 100% employer match up to $6,000 per year in the U.S.
- Monthly work and wellness stipends.
- Eligibility for the annual company bonus program.