Lead Platform Engineer, Identity & Access

Owns workforce identity at Webflow, a new role reporting to the Senior Director of IT that turns the company's Okta deployment into a governed, well-architected platform, working remotely in the US. The engineer sets the identity architecture and roadmap, manages the Okta tenant as code with hardening and change control, automates joiner-to-leaver lifecycle from the HRIS through SCIM, builds standard SSO onboarding patterns, designs RBAC, least-privilege access and reviews, and adds phishing-resistant MFA, device trust and governance of service accounts, tokens and AI agents.

The role is also the top escalation point for identity incidents. It requires eight years in identity, platform or infrastructure engineering, deep Okta architecture, SAML, OIDC, OAuth and SCIM, and Terraform.