Sr. IAM Engineer

Job Summary

We are seeking an experienced Okta Administrator to manage and support the organization''''''''s Identity and Access Management (IAM) platform. The ideal candidate will have hands-on experience with Okta administration, Single Sign-On (SSO), Multi-Factor Authentication (MFA), user lifecycle management, and identity governance.

Responsibilities

* Administer and maintain the Okta Identity Cloud platform.

* Configure and manage Single Sign-On (SSO) using SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and WS-Federation.

* Implement and manage Multi-Factor Authentication (MFA) policies.

* Provision and deprovision user accounts through Lifecycle Management (LCM).

* Configure Universal Directory and manage user profiles, groups, and attributes.

* Integrate enterprise applications with Okta.

* Develop and maintain authentication and authorization policies.

* Troubleshoot authentication, federation, and provisioning issues.

* Support identity governance, access reviews, and compliance initiatives.

* Work with Azure AD (Microsoft Entra ID), Active Directory, LDAP, and HR systems.

* Configure SCIM-based provisioning and application integrations.

* Automate administrative tasks using Okta Workflows, PowerShell, or REST APIs.

* Monitor system performance, audit logs, and security events.

* Collaborate with security, infrastructure, and application teams.

Skills

* 3+ years of Okta Administration experience.

* Strong experience with:

  * Okta Identity Cloud

  * Okta Universal Directory

  * Okta Lifecycle Management

  * Okta Workflows

  * Adaptive MFA

  * Single Sign-On (SSO)

* Experience with:

  * SAML 2.0

  * OAuth 2.0

  * OpenID Connect (OIDC)

  * SCIM

  * LDAP

  * Active Directory

  * Microsoft Entra ID (Azure AD)

* Experience integrating SaaS applications with Okta.

* Knowledge of RBAC and Identity Governance.

* Experience with PowerShell, REST APIs, or Python scripting.

* Strong troubleshooting and analytical skills.

## Preferred Skills

* Okta Certified Professional or Okta Certified Administrator.

* Experience with SailPoint, CyberArk, Ping Identity, or ForgeRock.

* Knowledge of Zero Trust architecture.

* Experience with cloud platforms (AWS, Azure, or Google Cloud).

* Familiarity with ServiceNow integration.

## Nice to Have

* Okta Identity Governance (OIG)

* Okta Privileged Access

* Workday integration

* JIT provisioning

* Security compliance (SOX, HIPAA, PCI-DSS)