TC
Lead Okta Identity Operations Engineer (L2 / L3 / Architect)
TechDigital Corporation
- Location not stated
- Remote
- Staff / Principal
- 16 hours ago
- Okta
- IAM
- SAML
- OIDC
- Kerberos
- Auth0
- Terraform
- Python
- SIEM
- Splunk
- Datadog
- HRIS
- SCIM
- LDAP
- Active Directory
- REST API
- IaC
- PowerShell
- Zero Trust
- Threat Modeling
- SOC2
- ISO 27001
- NIST
- DevSecOps
- CI/CD
- GitHub
- GitLab
16 hours ago
Okta / IAM fundamentals
SAML/OIDC onboarding
AD troubleshooting
Okta Verify / MFA
Production troubleshooting
OIDC 400 troubleshooting
Kerberos
Okta APIs
Scripting / automation
AD/RADIUS agent upgrades
Certificate renewal
Position Summary
We are seeking an elite, hands-on Okta IAM Operations Engineer & Architect to spearhead the administration, tier-3 incident resolution, architecture, and new feature development of our enterprise-wide Identity and Access Management ecosystem.
In this multi-faceted role, you will bridge the gap between day-to-day operational stability (L2/L3 support) and visionary engineering. You will own our complete identity continuum—spanning B2E (Workforce/Employee Identity), B2B (Partner/Federated Access), and B2C (Customer Identity/Auth0 or Okta CIAM)—ensuring frictionless, highly secure, and resilient authentication and authorization flows.
Key Responsibilities
1. Architecture, Design & New Development (Architect Level)
• Roadmap & Design: Architect, design, and deploy scalable, enterprise-grade Okta IAM solutions supporting B2E, B2B, and B2C architectures across multi-cloud and hybrid environments.
• New Integrations & Customizations: Drive greenfield development projects, including custom app integrations (SAML, OIDC/OAuth 2.0), API-driven provisioning, lifecycle management (LCM) workflows, and hooks.
• CIAM/B2C Engineering: Design secure, scalable customer identity journeys using Okta CIAM / Auth0, featuring custom branding, progressive profiling, self-service registration, and social identity providers.
• B2B Federation: Implement complex cross-company federations, inbound/outbound SAML/WS-Fed, and Okta Access Gateway (OAG) for legacy on-premise applications.
2. Operations, Engineering & Escalation Support (L2/L3 Level)
• Tier-3 Troubleshooting: Serve as the ultimate escalation point for complex, production-impacting identity failures, authentication loops, replication latency, and federation certificate expirations.
• Platform Administration: Oversee day-to-day tenant health, security configurations, multifactor authentication (MFA/Adaptive MFA) policies, Sign-On policies, and API security.
• Lifecycle & Automation: Automate routine operational tasks, user provisioning/deprovisioning workflows, and administrative tasks using Terraform, Python, or Okta Workflows to minimize manual overhead.
• Monitoring & Compliance: Maintain robust monitoring, logging, and SIEM integration (e.g., Splunk/Datadog) for Okta System Log events to proactively detect identity threats, anomalies, and compliance gaps.
Required Qualifications & Skills
Technical Expertise
• Experience: 8+ years of IT experience with at least 5+ years specializing exclusively in Enterprise Identity and Access Management (IAM), with a heavy focus on the Okta platform.
• Ecosystem Mastery: Deep, hands-on administrative and architectural experience across:
o B2E: Okta Workforce Identity Cloud (WIC), Lifecycle Management (LCM), HRIS integrations (Workday, BambooHR), Universal Directory (UD), and Advanced Server Access (ASA).
o B2B: Org2Org federation, dynamic groups, B2B integration networks, and secure partner access controls.
o B2C: Okta Customer Identity Cloud (powered by Auth0) or Okta CIAM, OIDC/OAuth 2.0 authorization code flows, and custom UI/SDK integrations.
• Protocols & Standards: Expert-level understanding of SAML 2.0, OIDC, OAuth 2.0, SCIM, LDAP, Active Directory, RADIUS, and REST APIs.
• Infrastructure as Code & Scripting: Proficiency in Terraform (Okta Terraform Provider), Python, or PowerShell for automating IAM tasks and managing configurations as code.
Core Competencies
• Troubleshooting Mindset: Exceptional analytical and debugging capabilities for complex root-cause analysis during high-severity L3 incidents.
• Security First: Strong grounding in Zero-Trust architecture principles, threat modeling, least-privilege access, and compliance frameworks (SOC 2, ISO 27001, NIST).
Preferred Qualifications
• Certifications: Active Okta Certified Professional, Administrator, Developer, or Consultant/Architect certifications.
• DevSecOps Familiarity: Experience integrating identity testing into CI/CD pipelines and utilizing source control (GitHub/GitLab) for Okta configurations
Lead Okta Identity Operations Engineer (L2 / L3 / Architect) · TechDigital Corporation