Webflow Lead Platform Engineer, Identity & Access at Webflow to own workforce identity architecture using Okta. Responsible for managing Okta tenant, automating identity lifecycle, and building onboarding paved roads.
Responsibilities
Location: Remote-first (United States)
The cash compensation for this role is tailored to align with the cost of labor in different geographic markets. We've structured the base pay ranges for this role into zones for our geographic markets, and the specific base pay within the range will be determined by the candidate’s geographic location, job-related experience, knowledge, qualifications, and skills.
United States (all figures cited below are in USD and pertain to workers in the United States)
Zone A: $232,000 - 290,000
Zone B: $217,600 - 272,000
Zone C: $204,800 - 256,000
This role is also eligible to participate in Webflow's company-wide bonus program. Target amounts are a percentage of base salary and vary by career level. Payouts are based on company performance against established financial and operational goals.
Please visit our Careers page for more information on which locations are included in each of our geographic pay zones. However, please confirm the zone for your specific location with your recruiter.
Application Information:
Application deadline: applications accepted on an ongoing basis until position is closed and filled
This posting is for a new position
Reporting to the Senior Director, Information Technology
Qualification
Minimum of 8 years in identityFluency in SAMLExperience with identity governanceScripting ability (PythonDesign like an attackerGet results with SecurityUse AI tools with good judgment
Required
Minimum of 8 years in identity, platform, or infrastructure engineering, including ownership of a workforce identity platform at meaningful scale
Deep hands on experience architecting an enterprise identity provider, with Okta strongly preferred
Fluency in SAML, OIDC, OAuth 2.0, and SCIM, including debugging at the token and assertion level
Experience with identity governance, including RBAC design, HRIS driven lifecycle automation, and meeting audit requirements
Strong grounding in Zero Trust and identity based attacks, including device trust and the security of non human identities
Scripting ability (Python, JavaScript, or similar) and infrastructure as code experience, such as Terraform
Clear communication with senior and executive audiences, including driving architecture decisions
Preferred
You’ll thrive as a Lead Platform Engineer, Identity & Access if you:
Design like an attacker, asking how every control could fail or be abused, and respect that one policy change can lock out the whole company
Get results with Security, HR, and application owners through influence, not authority
Care as much about adoption as correctness
Bring order to an under managed environment without waiting for a perfect plan
Use AI tools with good judgment
Are comfortable as the lead identity expert, mentoring others and setting the standard
Stay curious and open to growth — demonstrating a proactive embrace of AI, and actively building and applying fluency in emerging technologies to elevate how we work, drive faster outcomes, and expand collective impact.
