OKTA SME/Architect

Okta Identity Access Management (IAM) Engineer

The Okta Identity Access Management (IAM) Engineer will be the senior technical SME/Architect in the IAM organization and is responsible for architecting, design, implementing, and supporting access management solutions in distributed OnPrem & Cloud infrastructure. Skilled in troubleshooting complex technical issues. Works closely with enterprise architects to ensure adequate security solutions are in place to mitigate identified risks sufficiently, while meeting business objectives and regulatory requirements. Provides technical leadership and delivers complex projects.

This role can be based out of Plano, Texas or Purchase, NY and requires coming into the office.

Responsibilities

Provides subject matter expertise in architecting, solutioning, and implementing access management requirements.

Provides advanced architecture and engineering expertise to automate and administer identity and compliance requirements.

Drives planning and execution of identity management roadmaps and technology enhancements.

Creates and maintains standards surrounding documentation related to identity processes, procedure, and infrastructure.

Assesses current applications and architecture to ensure current implementations align with industry guidelines, best practices, and management approved standards.

Contribute to the development of the workforce and customer identity and access management strategy.

Collaborate with Enterprise Architects, application development teams, Cybersecurity staff, and the infrastructure team to define the enterprise IAM strategy.

Provide level 3 production support to help diagnose and troubleshoot production issues.

Adapt the architecture to evolving security conditions and support security guidelines.

Develop and deliver applicable documentation, training, and knowledge transfer to both internal and external stakeholders.

Champion and foster an Agile DevOps culture within the organization by promoting cross-functional collaboration, continuous integration, and continuous delivery practices.

Qualifications

10+ years of overall IT experience.

8+ years of hands-on experience in authentication architecture, solutioning, and design roles.

8+ years of hands-on experience with Okta and/or relevant access management tools.

7+ years of scripting (PowerShell, Python) and development (Java, J2EE, JavaScript, React, Rest API) experience.

5+ years working with Agile and DevOps tools and methodologies.

Minimum Okta Certified Administrator: Okta Certified Consultant and/or Okta Certified Developer preferred.

BS/BA degree or equivalent experience.

CISSP / CIAM Certification is a plus.

Preferred Qualifications

Extensive experience in architecting, designing, and solutioning authentication services.

Broader IAM domain experience with a focus on information security.

Strong expertise in designing solutions with the standard IAM platforms like Okta, PingFederate in enabling single sign-on services for both cloud and on-prem applications.

Hands-on experience in building SSO solutions with various protocols like SAML, OAuth, OIDC, and headers-based applications and platforms, preferably Azure AD, Ping, and SiteMinder.

Strong hands-on experience in designing and architecting consumer identity and access management solutions.

Strong understanding of the latest security principles like zero trust and passwordless authentication to implement new standards in the authentication model.

Must have working knowledge of Okta Lifecycle Management and Administrative APIs.

Experience with solutions like CyberArk, Beyond Trust, RSA or comparable products.

Excellent understanding of REST integration concepts.

Experience in directory services like Oracle LDAP, and AD.

Experience working with cloud-based authentication solutions (e.g., AWS Cognito, Azure AD, Okta).

Strong hands-on development experience - Java, Node js, React, Sprint boot, REST API, and JavaScript.

Hands-on experience with JavaScript, Python, Ruby, PowerShell, or other scripting languages preferred.

Experience building CICD pipelines in Azure or AWS.

Experience in automating application deployment building CICD pipelines using Ansible and Terraform.

Experience in monitoring tools like Splunk, ELK, Prometheus, or similar tools.

Experience with container technologies Docker, Kubernetes.

Experience with Linux and Windows platforms, middleware, Apache, and load balancers.

Experience developing workflows, custom connectors, and troubleshooting complex issues.

Strong experience in troubleshooting infra issues covering network, web servers, SSL certs, middleware, cloud components, etc.

Experience with Agile and DevOps tools and methodologies.

Minimum Okta Certified Administrator: Okta Certified Consultant and/or Okta Certified Developer preferred.

CISSP / CIAM Certification is a plus.

Experience in SiteMinder is preferred.

Non-Technical Skills

Exceptional communication and interpersonal skills with the ability to influence and collaborate with diverse stakeholders.

Deliver outcomes with a little supervision, must be a self-starter and self-motivator.

Strong analytical, problem-solving, and decision-making skills, with the ability to manage complex and competing priorities.

Strong project management and organizational skills, with the ability to deliver high-quality results.

Ability to think strategically and suggest creative solutions.

Ability to synthesize complex requirements into simple business practices.

Flexible and able to adapt to changing priorities.