--- title: 'Staff/Principal Identity Engineer at Legora' canonical: 'https://feeny.ai/job/staff-principal-identity-engineer-legora-new-york-4k690k8m11cg' type: 'job' last_seen: '2026-11-06' --- # Staff/Principal Identity Engineer at Legora - **Company:** [Legora](https://feeny.ai/companies/legora) - **Location:** New York, NY - **Compensation:** $216k–$292k - **Employment:** full-time - **Work type:** onsite - **Posted:** 2026-10-11 - **Last confirmed live:** 2026-11-06 - **Apply:** https://jobs.ashbyhq.com/legora/f7dc200d-b2bf-4da6-a475-4606b7bb26f8 ## Job description ## About Us Legora is redefining how legal work gets done. Not built for lawyers, built with them. We work alongside the world’s best legal teams, who expect excellence, precision, and speed, and we hold ourselves to the same bar. Our AI-native workspace lets legal professionals move faster, think more clearly, and operate with sharper precision. By analysing thousands of documents in minutes and powering end-to-end workflows, we cut through complexity, teams can focus on what matters: judgment, strategy, and outcomes. 2,100+ customers across 80+ countries trust us, including Cleary Gottlieb, Goodwin, Linklaters, White & Case, Dentons, and Barclays. We’ve scaled to $200M+ in ARR, with teams across Europe, North America and APAC, and continue to expand through acquisitions including Qura, Walter AI, Graceview, Cadastral, and Wexler. We partner with world-class performers: including Aaron Judge and the New York Yankees, Ludvig Åberg (and his caddie), and campaigns featuring Jude Law. Joining Legora means three things. - We lean in: ownership over titles, outcomes over intentions. - We fight for excellence: high standards, direct, ego-free feedback. - We grow together: as a team and with our customers. Mission before ego. Everyone contributes. No one coasts. If you’re driven by impact, pace, and raising the bar. This is the place. ## The role We are looking for a hands-on Staff/Principal Identity Engineer to own Legora's Okta platform and build the security controls that protect our employees, applications, devices and data. This is an individual contributor role with end-to-end responsibility for Okta architecture, engineering, governance and operations. Expert-level Okta capability is the most important requirement. You will set the technical direction, make architecture decisions, build integrations and automation, and remain accountable for how the platform performs in production. You will also engineer controls across SaaS applications, endpoint and device trust, data protection, non-human identities and AI usage. ## What you will own - Full ownership of Okta: Own the platform roadmap, architecture, configuration, security posture, integrations, change management and operational reliability. Set standards for authentication, authorization, administrative access and recovery. Be the final technical escalation point for complex Okta issues and own their resolution. - Authentication and application integrations: Design and troubleshoot SSO, SAML, OIDC, OAuth and SCIM integrations. Own phishing-resistant MFA, risk-based authentication, session controls and device-aware access policies. Build secure application onboarding with configuration validation, named owners, approvals and controlled secret handling. - Identity lifecycle and access governance: Build reliable joiner, mover and leaver workflows connecting HR systems, Okta, directories and business applications. Own provisioning, entitlement changes and timely revocation, including downstream access and active sessions. Establish access reviews, least-privilege controls, privileged access standards and accountable application ownership. - Identity engineering and automation: Deliver opinionated, practical identity solutions using Python, Okta APIs, Workflows and other appropriate tools. Choose the right mix of infrastructure as code, admin consoles and automation based on risk, scale and maintainability. Keep code in version control with peer review, testing and safe deployment, and establish clear change controls for console-managed settings. Design for retries, partial failures, observability, rollback and recovery. Build reusable tooling, clear workflows and documentation so you and more junior engineers can operate and extend the platform efficiently. Eliminate single points of failure in systems, access and knowledge through shared ownership and tested recovery procedures. - Non-human identity and agent authorization: Establish ownership, least privilege, credential lifecycle and revocation for service accounts, API tokens, integrations and AI agents. Build authorization controls for agent and MCP access, with clear permission boundaries, approval requirements and audit trails. ## What you will bring - Typically 8-10+ years of relevant experience in identity engineering, IT infrastructure or corporate security, with demonstrated expert-level Okta ownership. We assess the depth of your experience and the scope of your ownership rather than a fixed years-of-experience minimum. - Expert-level, hands-on Okta experience, including architecture, complex integrations, lifecycle management, authentication policies, governance and production troubleshooting. You have personally owned an enterprise Okta environment and can explain the decisions, tradeoffs and outcomes of your work. - Deep understanding of SAML, OIDC, OAuth, SCIM, federation, authentication and authorization. You can diagnose integration failures, unsafe access paths and incomplete deprovisioning across interconnected systems. - Demonstrated production engineering with Python and/or JavaScript, APIs and Terraform or equivalent infrastructure as code. You can show how you test, deploy, monitor and recover your automation. - Experience delivering broader corporate security controls across SaaS, endpoints, device trust and data protection, with the judgment to prioritize risks and carry remediation through to completion. - Independent technical ownership: define the technical roadmap, lead complex work across teams, make sound security decisions and remain accountable for production outcomes. Communicate directly, work constructively through disagreement and raise the technical standard around you. Useful additional experience - HR-driven identity modernization, Workday integrations, Active Directory retirement or directory consolidation. - Self-service application onboarding. - Identity governance and privileged access. - Non-human identity, AI-agent or MCP security. - Okta certifications are useful, but demonstrated engineering depth and ownership matter most. What’s In It For You - Global collaboration: Partner with teams and clients across Europe, APAC, and North America. - Competitive package: Comprehensive salary, benefits, and tools for success. - Meaningful work: Your efforts shape how thousands of lawyers use AI daily. - In-person environment: Union Square office designed for ambitious builders and company provided lunch daily. - Benefits & Perks: We invest in our people with a comprehensive, thoughtfully designed benefits package: Medical, Dental & Vision - Multiple medical plan options through Aetna and Kaiser Permanente - HSA or Healthcare FSA (based on plan selection) - Dental plans via MetLife - Vision plans via Vision Care Family Support - Generous parental leave - Free access to Maven Clinic - Dependent Care FSA - Free One Medical membership for employees and dependents Additional Perks - Pre-tax commuter benefits - Life Insurance + STD/LTD - 401(K) with generous company match - Unlimited PTO - Robust voluntary benefits, including identity protection (via Aura), legal coverage via MetLife, pet savings programs, and more Legora is an Equal Opportunity Employer At Legora, we believe great teams are built on diversity of thought and experience. We’re proud to be an equal opportunity employer and committed to creating an inclusive, high-performance culture where everyone can do their best work. We welcome people of all backgrounds and don’t discriminate based on race, color, religion, national origin, gender, gender identity or expression, sexual orientation, age, disability, veteran status, or any other characteristic protected by law. ## About Legora ## Company Overview - **One-liner**: Legora builds a collaborative AI workspace that empowers legal professionals to review, draft, research, and advise with greater speed and precision. - **Entity Type**: Private (Series D; total funding $865.6M) - **Headquarters**: Stockholm, Sweden - **Founded**: 2023 - **Founders**: Max Junestrand (Co-founder & CEO) ## Core Business - **Primary industry**: Legal Technology (Legal AI) - **Target customers**: Law firms and in-house legal teams (B2B/Enterprise) - **Mission or purpose statement**: "To empower exceptional lawyers" by building the world's first truly collaborative AI for legal work [legora.com/about]. ## Products & Services - **Legora aOS (Agentic Operating System)**: A single platform that connects information, communication, and execution of legal work. Integrates AI agents, monitoring, and workflow tools. - **Agent**: An end-to-end executor that plans, reviews, and delivers complex legal tasks, allowing lawyers to focus on judgment-intensive decisions. - **Monitors**: Continuously scans global regulation and surfaces relevant changes. - **Lists**: Organises legal work from documents and connects AI outputs to workflows. ## Market Standing - **Valuation/Market Cap**: Not publicly disclosed - **Key Metric**: Annual Revenue of $50.0M (LinkedIn estimate); Total Funding of $865.6M across 5 rounds (Seed, Series A, B, C, D). - **Notable Investors/Partners**: Accel, Bessemer Venture Partners, ICONIQ, General Catalyst, Benchmark, Redpoint, Y Combinator. Recent Series D (April 2026, $600M) included 23 investors. - **Growth Signals**: 352 employees (+528.8% YoY); 1,000+ customers in 30+ markets; acquired Qura and Walter. Active job postings up 1308% year-over-year (169 open roles). ## Competitive Advantages - **Deep legal domain AI**: Purpose-built for legal workflows rather than general-purpose LLMs. - **Security & compliance**: ISO 27001, ISO 42001, SOC 2 Type II, GDPR, HIPAA certified – critical for law firm adoption. - **Agentic approach**: End-to-end execution of complex legal work, reducing non-billable hours by an average of 30%. ## Strategic Focus - **Building the "OS for legal work"** – a single system connecting information, communication, and execution. - Expanding globally with offices in 16 countries (US, UK, Australia, India, Denmark, etc.). - Deepening AI governance (ISO 42001) to maintain trust and regulatory readiness. ## Why Work Here - **Culture**: Values include "lean in," "fight for excellence," "grow together," and "curiosity and clarity." Emphasis on transparency, speed, and real impact over hierarchy [legora.com/careers]. - **Work environment**: Highly collaborative – "collaboration isn’t a process, it’s our foundation" [legora.com/about]. Hybrid/office presence likely given multiple locations; exact policy not specified. - **Engineering focus**: Roles span software engineering, AI, site reliability, and product design. Hiring process includes a case presentation and a final interview with the CEO. - **Perks**: Not explicitly detailed, but employer rating is 4.4/5 (Work-Life: 4.5, Compensation: 5.0, Culture: 4.4, Career: 4.4) from 9 reviews on LinkedIn. ## Sources 1. [Legora Careers Page](https://legora.com/careers) 2. [Legora Official Site](https://legora.com/) 3. [Legora About Page](https://legora.com/about) 4. [Legora LinkedIn Company Page](https://www.linkedin.com/company/wearelegora) ## Other roles at Legora - [Accounting Engineer - Stockholm](https://feeny.ai/job/accounting-engineer-stockholm-legora-stockholm-zywdmxdyvhmz) — Stockholm, Sweden - [Legal Engineer - Banking & Financial Services](https://feeny.ai/job/legal-engineer-banking-financial-services-legora-sydney-fbvf3gcthjx8) — Sydney, Australia - [ビジネス・デベロップメント・レプレゼンタティブ (Business Development Representative)](https://feeny.ai/job/business-development-representative-legora-tokyo-1hc45589rbde) — Tokyo, Japan - [Compensation Analyst](https://feeny.ai/job/compensation-analyst-legora-new-york-xhxsfwrygz2g) — New York, NY - [GTM SMB Director, EMEA](https://feeny.ai/job/gtm-smb-director-emea-legora-stockholm-cbe1kegv2rep) — Stockholm, Sweden - [Senior Manager, People Advisors](https://feeny.ai/job/senior-manager-people-advisors-legora-london-y9we3tnxsg8f) — London, United Kingdom - [Engagement Associate](https://feeny.ai/job/engagement-associate-legora-london-manyqbe4kgkk) — London, United Kingdom - [Manager, People Operations](https://feeny.ai/job/manager-people-operations-legora-stockholm-95f5t1znzezq) — Stockholm, Sweden - [Engagement Manager - Enterprise Corporates](https://feeny.ai/job/engagement-manager-enterprise-corporates-legora-london-7n2nd4esgprc) — London, United Kingdom - [Software Engineering - Product](https://feeny.ai/job/software-engineering-product-legora-stockholm-yh1c0445f4wb) — Stockholm, Sweden