Senior Okta & IAM Systems Engineer

Job Description Summary: Senior Okta & IAM Systems Engineer

Primary Focus:

Okta Operations,

M&A Identity Tenant Migration, and

Legacy IAM Application Modernization

Key Core Responsibilities Covered

Operations & Okta Platform Support:

Manage day-to-day operations, health monitoring, and administration of Okta (OIE / Identity Engine, Universal Directory, Adaptive MFA, Lifecycle Management, Workflows, Okta Access Gateway).

Tier 3 support for identity escalations, authentication failures, API token issues, and provisioning sync errors.

Governance, RBAC/ABAC policy enforcement, and operational scripting via API, PowerShell, and Python.

M&A / Subsidiary Identity Migration:

Lead the end-to-end technical consolidation of identity infrastructures, user accounts, groups, and directory services from a recently acquired subsidiary into the parent company’s enterprise Okta tenant.

Normalize user schemas, reconcile attribute conflicts, establish co-existence strategies, and execute seamless cutover waves.

Legacy IAM Application Onboarding & Modernization:

Assess and migrate enterprise applications off legacy IAM platforms (e.g., ADFS, Ping Federate, CA SiteMinder, Oracle IAM, standalone LDAP/Kerberos) to Okta.

Implement standard modern federation and provisioning protocols (SAML 2.0, OpenID Connect / OIDC, OAuth 2.0, SCIM).

Utilize Okta Access Gateway (OAG) for legacy on-premises web apps requiring header or cookie-based authentication.

Required Qualifications & Experience

Experience: 8+ years in Enterprise IAM / Security, with 5+ years specifically in Okta administration and engineering.

Core Competencies: Okta OIE, Universal Directory, Tenant-to-Tenant Migrations, SAML 2.0/OIDC/SCIM, Active Directory consolidation.

Certifications (Preferred): Okta Certified Administrator, Consultant, or Professional.