Client Platform Engineer, AI & Automation

#TeamNextdoorNextdoor (NYSE: NXDR) is the essential neighborhood network. Neighbors, public agencies, and businesses use Nextdoor to connect around local information that matters in more than 350,000 neighborhoods across 11 countries. Nextdoor builds innovative technology to foster local community, share important news, and create neighborhood connections at scale. Download the app and join the neighborhood at nextdoor.com. Meet Your Future NeighborsAs a Client Platform Engineer, you will connect IT and Engineering for AI tools and automation at Nextdoor. As more teams start using AI agents, assistants, and connectors, you will manage the IT platforms that keep these tools safe and scalable. This includes handling identity and access for non-human and user-delegated agent identities in Okta, overseeing governance and reviews for new agents and MCP connectors, tracking usage and adoption, and managing costs and licenses to keep our AI use sustainable. You will work with teams in Business Technology, Engineering, Security, and Finance to create processes that help teams launch AI tools quickly while following IT guidelines. Your work will help make AI a valuable resource across the company.At Nextdoor, we operate in an AI-first environment and expect every team member to actively use AI tools as part of their workflow. We aren't looking for prompt engineers; we’re looking for people who use tools like Claude, Gemini, ChatGPT, and Glean to challenge their own thinking and take full ownership of AI-assisted outputs.We also offer a warm and inclusive work environment that embraces a hybrid employment model, blending an in office presence and work from home experience for our valued employees. The hiring team will go over these expectations with you if you are being considered for a role near one of our offices in San Francisco, Los Angeles, Chicago, Dallas, New York, and London. TheImpact You’ll MakeIf you have experience making IT platforms reliable, secure, and easy to use, and you want to apply those skills to AI tools across the business, this role could be a great fit. You will set the standards for how every AI agent at Nextdoor authenticates, what it can access, what it costs, and how teams are alerted if issues arise. You will be responsible for the standards, review processes, and monitoring that turn one-off AI projects into a dependable platform for the company.Your responsibilities will include: Design and operate the identity, access, and credential lifecycle for AI agents at Nextdoor, including non-human and user-delegated identities in Okta, OAuth 2.0, and OIDC scope minimization, and canonical authentication patterns (user OAuth, service accounts, workload identity federation) that teams default to alongside Nextdoor's existing Network and AV StandardsBuild and run review processes for AI agents and connectors, covering pre-production review of agent tool surfaces, data scopes, and blast radius; intake review for new MCP servers and third-party connectors (vendor diligence, OAuth scope approval, hosted vs. self-hosted decisions); and the underlying policy framework for registration, data classification, and human-in-the-loop requirementsMaintain a centralized registry of AI agents and tooling deployed across Nextdoor, and own the associated telemetry, including Datadog dashboards, vendor analytics ingestion (e.g., the Anthropic Enterprise Analytics API), and recurring department-level adoption reporting for IT and executive leadershipOwn seat governance and cost controls across Nextdoor's AI tool portfolio (Claude Enterprise, Cursor, Copilot, and emerging tools), including per-user and per-org spend caps, multi-tenant license allocation across vendor organizations, quarterly access reconciliation against Okta, and monthly budget reviews for IT and FinanceParticipate in in-person Nextdoor events such as trainings, off-sites, volunteer days, and team building exercisesBuild in-person relationships with team members and contribute to Nextdoor’s company cultureWhat You’ll Bring To The Team5+ years in IT engineering, client platform engineering, or IAM-focused security engineering, with clear ownership of production identity and access systems. And/or the ability to perform at an advanced level in the domainDeep hands-on Okta administration experience, including SSO/SAML/OIDC, SCIM, group rules, sign-on policies, and access certification, with a strong understanding of audit and SOX implicationsWorking knowledge of OAuth 2.0, OIDC, and service account or workload identity patterns across Google Cloud and AWS, including the ability to spot anti-patterns (e.g., domain-wide delegation, over-scoped service account keys) before they reach productionComfortable writing scripts to automate IT operations in Python, Bash, or similar, and experience operating CI/CD or scheduled-job patterns (GitHub Actions, cron) for IT automation.Hands-on experience with AI development tools (Claude, GitHub Copilot, LangChain, etc.) as a practitioner, not just an administratorFamiliarity with at least one observability platform, with Datadog preferred, including building dashboards, alerts, and ingestion pipelines from third-party APIsStrong written communication and the ability to author internal standards, runbooks, and review documentation that other teams will actually usePreferred QualificationsDirect experience with Claude Enterprise, GitHub Copilot, Cursor, or comparable AI tooling deployed at enterprise scale, including license and seat governanceWorking knowledge of MCP (Model Context Protocol), agent integration patterns, or comparable agent-to-tool connector frameworksBackground working alongside Engineering on shared platform tooling, with the ability to operate at the boundary of IT and Engineering ownershipExperience with Jamf Pro and macOS endpoint managementPrior involvement in SOX access certification or quarterly UAR processesBonus PointsExperience evaluating SaaS vendors and MCP or connector marketplaces for security posture, data flow, and supply-chain riskExperience with AI governance frameworks (NIST AI RMF, ISO 42001, EU AI Act)Familiarity with Workato, Tray.io, Okta Workflows, or other iPaaS platformsIT certifications (Okta, Jamf, Google Cloud, AWS, or similar)RewardsCompensation, benefits, perks, and recognition programs at Nextdoor come together to create our total rewards package. Compensation will vary depending on your relevant skills, experience, and qualifications. The starting salary for this role is expected to range from $140,000-$150,000 on an annualized basis, or potentially greater in the event that your 'level' of proficiency exceeds the level expected for the role. The salary range will be determined by the candidate’s geographic location.We expect to award a meaningful equity grant for this role. With quarterly vesting, your first vest date will take place within 3 months of your start date.When it comes to benefits, we have you covered! Nextdoor employees can choose between a variety of health plans, including a 100% covered employee only plan option, and we also provide a OneMedical membership for concierge care.At Nextdoor, we empower our employees to build stronger local communities. To create a platform where all feel welcome, we want our workforce to reflect the diversity of the neighbors we serve. We encourage everyone interested in our mission to apply. We do not discriminate on the basis of race, gender, religion, sexual orientation, age, or any other trait that unfairly targets a group of people. In accordance with the San Francisco Fair Chance Ordinance, we always consider qualified applicants with arrest and conviction records.For information about our collection and use of applicants’ personal information, please see Nextdoor's Personnel Privacy Notice, found here.