We are looking for an experienced Okta & IGA Engineer to support the implementation, onboarding and ongoing operations of enterprise Identity & Access Management (IAM) solutions. The role will be responsible for onboarding applications into Okta, implementing Single Sign-On (SSO) and Multi-Factor Authentication (MFA), supporting Identity Governance & Administration (IGA) activities, developing automated identity workflows and providing Tier 2/3 operational support for the Okta environment. The successful candidate should have strong hands-on experience with Okta, modern authentication protocols, Active Directory integration, APIs and access governance processes.
Key Responsibilities:
- Manage end-to-end onboarding of SaaS, cloud-native and custom enterprise applications into Okta.
- Configure, test and troubleshoot SSO and MFA integrations using SAML 2.0, OAuth 2.0 and OpenID Connect (OIDC).
- Implement and support agentless SSO and header-based authentication solutions for legacy applications.
- Develop custom validation rules, Okta Inline Hooks and automated identity lifecycle workflows using APIs and programming languages.
- Work closely with application owners, infrastructure teams and other stakeholders to gather requirements and support application onboarding throughout the SDLC.
- Configure Active Directory service accounts, Service Principal Names (SPNs) and Kerberos-based authentication workflows.
- Configure and support Okta Network Zones, Identity Provider routing rules and related access policies.
- Execute end-to-end Access Certification Campaigns using Okta Identity Governance (OIG) or integrated IGA platforms.
- Define campaign scope, reviewer assignments, remediation workflows and automated access revocation rules.
- Support Joiner, Mover and Leaver identity lifecycle processes.
- Provide Tier 2/3 operational support for the enterprise Okta environment.
- Troubleshoot authentication failures, directory synchronisation issues, token mismatches, federation errors and user access incidents.
- Perform root-cause analysis for recurring IAM issues and implement appropriate preventive measures.
- Support audit, compliance and security requirements relating to identity and access management.
- Maintain technical documentation, operational procedures and application onboarding records.
Required Skills & Experience:
- 5–7 years of experience designing, implementing and supporting enterprise Identity & Access Management solutions.
- Strong hands-on experience administering and supporting Okta in an enterprise environment.
- Experience configuring Okta SSO profiles, lifecycle management rules and custom authorization servers.
- Strong knowledge of SAML 2.0, OAuth 2.0, OpenID Connect (OIDC) and modern federation standards.
- Hands-on experience with Okta Identity Governance (OIG) or other enterprise IGA platforms.
- Experience executing Access Certification / Access Review campaigns, including remediation and automated revocation.
- Experience with Active Directory integration, Kerberos, Service Accounts and SPNs.
- Experience implementing agentless or gateway-based authentication for legacy applications.
- Strong understanding of APIs, JSON payloads, token-based authentication and API middleware.
- Proficiency in at least one programming or scripting language such as JavaScript/Node.js, Java, Python, C# or Go.
- Experience developing integrations using Okta APIs, Inline Hooks or custom authentication workflows.
- Strong troubleshooting experience covering authentication, federation, directory synchronisation and identity lifecycle issues.
- Experience providing Tier 2/3 operational support for enterprise IAM environments.
Qualifications:
- Degree in Information Technology, Computer Science, Engineering or equivalent.
- Relevant Okta certification such as:
- Okta Certified Professional
- Okta Certified Administrator
- Okta Certified Consultant
- Okta Certified Developer
To apply,simply click the "Apply" button or send your updated profile to [email protected]
EA Licence No.:18S9405 / EA Reg. No.:R1330864
Percept Solutions is expanding and actively seeking talented individuals. We encourage applicants to follow Percept Solutions on LinkedIn at https://www.linkedin.com/company/percept-solutions/to stay informed about new opportunities and events.