Principal Product Manager, IAM Security & Agentic Identity

Key Portfolio Focus Areas

• AI Agent & Agentic Identity Security: Leading the strategy for how Okta governs non-human, autonomous AI workloads across our entire product ecosystem.
  • O4AA (Okta for AI Agents) & A4AA (Auth0 for AI Agents): Defining authentication and authorization patterns for workforce and developer-facing AI agents.
  • Next-Gen Guardrails: Managing token exchange patterns, identity/security gateways, and the Model Context Protocol (MCP) to secure agent-to-data interactions.
  • Hardware-Bound Session Security: Architecting Okta’s defense against session cookie thievery by leveraging cryptographically hardware-bound tokens. This includes owning the strategy for Okta Device Bound SSO (DBSSO) and Google Chrome Device Bound Session Credentials (DBSC).
  • Advanced Threat & Posture Management: Integrating Identity Threat Protection (ITP) for continuous risk evaluation and Identity Security Posture Management (ISPM) to surface and remediate hidden risks across human and machine identities.

Roadmap Influence & Strategy

• Develop and refine the strategic roadmap for the Identity Security portfolio.
• Act as a key stakeholder who directly shapes and prioritizes the core Okta and Auth0 Product roadmaps based on internal deployment findings.

Champagne Lifecycle Management (Alpha to EA)

• Ensure that as Alpha features are released, Okta’s internal IAM team rigorously tests them and provides real-time feedback through the SDLC process.
• Own the internal rollout of these features through Early Availability (EA), driving adoption so Okta successfully "drinks its own champagne."

Anti-Session Hijacking Architecture

• Design the internal rollout blueprint and external product strategy for how Okta DBSSO and Chrome DBSC complement one another, creating a layered defense that protects corporate endpoints from token and cookie exfiltration.

Agentic Governance

• Define the operational and technical guardrails for deploying AI Agents internally and externally—ensuring secure integration via identity gateways, downscoped runtime permissions, and an unbreakable audit trail.

Execution & Technical Delivery

• Act as the primary liaison between business units, development, and engineering teams.
• Lead planning activities, author comprehensive PRDs/user stories, and prioritize features within Scrum/Kanban frameworks.

Metrics & Insights

• Define and monitor KPI-based reporting to provide the VP of IAM and executive leadership with clear visibility into portfolio scope, security coverage, and testing velocity across human and non-human identities.