Job Summary:
We are seeking a skilled OKTA/SSO Engineer to support and enhance our Identity and Access Management infrastructure. This role will focus on the design, implementation, and maintenance of OKTA-based SSO solutions, ensuring secure and seamless access to enterprise applications. The ideal candidate will have hands-on experience in OKTA configuration, SAML/OAuth integrations, lifecycle management, and security policy enforcement.
Key Responsibilities:
- Implement and manage
OKTA Identity and Access Management
solutions, including Single Sign-On (SSO), Multi-Factor Authentication (MFA), and lifecycle management. - Integrate third-party and in-house applications with OKTA using
SAML 2.0, OAuth 2.0, OIDC
, and SCIM protocols. - Configure and manage user authentication flows, group assignments, and access policies.
- Monitor and maintain system performance, availability, and security compliance related to identity services.
- Support user provisioning/de-provisioning using
OKTA Workflows or Lifecycle Management
tools. - Troubleshoot access and authentication issues; provide Tier 2/3 support for identity-related incidents.
- Collaborate with security, infrastructure, and development teams to ensure secure and scalable access control implementations.
- Maintain documentation and contribute to IAM policy and procedure development.
- Assist with audits, compliance requirements, and security reviews as related to identity services.
Required Qualifications:
- Bachelor’s degree in Computer Science, Information Security, or related field; or equivalent experience.
- 3+ years of experience with OKTA Identity solutions, including SSO and MFA.
- Strong knowledge of
authentication/authorization protocols
(SAML, OAuth, OIDC, LDAP). - Hands-on experience with integrating cloud and on-prem applications with OKTA.
- Familiarity with
IAM governance, role-based access control (RBAC),
and least-privilege principles. - Working knowledge of
security best practices
and compliance standards (e.g., SOC2, HIPAA, ISO 27001). - Excellent troubleshooting, communication, and documentation skills.
Preferred Qualifications:
- OKTA Certified Professional or Administrator certification.
- Experience with
OKTA Workflows, API integration
, or custom scripting
(e.g., PowerShell, Python). - Familiarity with
Zero Trust architecture
and modern identity trends. - Exposure to other IAM tools (e.g., Azure AD, Ping Identity, SailPoint) is a plus.