Senior Okta Architect/Engineer

ASRC Federal is actively hiring a Senior Okta Architect/Engineer in support of our Defense Counterintelligence Security Agency (DCSA) program based out of Quantico, VA.

This is primarily a Telework position with a requirement to be onsite at least two (2) days a week or as needed at Quantico Marine Corps Base, VA.

Position Description:

We are seeking an exceptionally skilled and experienced Senior Okta Architect/Engineer to lead our enterprise Identity and Access Management (IAM) initiatives. The ideal candidate will serve as the technical authority for our Okta platform, responsible for enterprise-wide architecture, strategic planning, advanced implementation, and optimization of our Okta Identity and Access Management solutions. This senior-level role requires deep expertise in designing and implementing complex IAM architectures that ensure the confidentiality, integrity, and availability of our organization's data and systems across a large-scale, hybrid enterprise environment.
The Senior Okta Architect/Engineer will leverage the complete Okta ecosystem, including Advanced Single Sign-On (SSO), Adaptive Multi-Factor Authentication (MFA), Universal Directory, Advanced Lifecycle Management, API Access Management, and Okta Workflows to architect and enforce our Zero Trust security model. This role will also involve strategic planning, vendor engagement, and serving as the primary technical liaison between business stakeholders and technical teams.
Minimum Requirements:

Experience: Minimum of 10 years of progressive experience in Identity and Access Management, with at least 5 years of hands-on experience architecting and implementing Okta solutions in large-scale enterprise environments (10,000+ users)
Security Clearance: Active Secret Clearance REQUIRED, eligible to be upgraded to TS/SCI
Certification Requirements:

Must meet 8570 certification requirements at the time of hire: IAT Level II or higher (e.g., Security+ CE, CCNA Security, CySA+, GICSP, GSEC, CISSP, CASP+, or higher tiered 8570 certification)

Highly Desired:

CISSP, CISM, or equivalent advanced security certification
Okta certifications are highly desired, such as:

Okta Certified Professional
Okta Certified Administrator
Okta Certified Consultant.

Education: Bachelor's Degree in Cybersecurity, Computer Science, Information Systems Management, or a related field; Master's Degree preferred. An equivalent combination of military service and/or at least ten (10) years of significant, relevant work experience may be considered in lieu of degree requirement.

Responsibilities:

Design and architect enterprise-wide Okta IAM solutions that align with organizational security strategy, business objectives, and compliance requirements
Develop and maintain the Okta platform roadmap, identifying opportunities for optimization, automation, and enhanced security
Lead architectural reviews and provide technical guidance on complex IAM initiatives
Evaluate emerging Okta features and IAM technologies to drive continuous improvement
Design disaster recovery and business continuity strategies for the Okta platform

Advanced Implementation and Configuration

Lead the design and implementation of complex Okta integrations with enterprise applications, cloud services, and legacy systems
Architect and implement advanced authentication policies, including adaptive MFA, risk-based authentication, and context-aware access controls
Design and implement sophisticated Okta Workflows for automated provisioning, de-provisioning, and lifecycle management
Develop custom integrations using Okta APIs, SDKs, and webhooks to meet unique business requirements
Implement and optimize API Access Management for securing APIs and microservices

Platform Governance and Optimization

Establish and enforce governance frameworks for Okta platform management, including change control, configuration management, and security policies
Conduct regular platform health assessments, performance tuning, and capacity planning
Implement monitoring and alerting strategies to ensure platform availability and performance
Lead security audits and compliance assessments of the Okta environment
Optimize license utilization and manage vendor relationships

Technical Leadership and Collaboration

Serve as the primary technical authority and subject matter expert for all Okta-related initiatives
Provide advanced troubleshooting and resolution for complex SSO, authentication, authorization, and lifecycle management issues
Collaborate with enterprise architecture, security operations, network, application development, and business teams to ensure seamless IAM integration
Lead cross-functional teams in the planning and execution of major IAM projects
Mentor and provide technical guidance to junior Okta engineers and administrators

Documentation and Knowledge Management

Create and maintain comprehensive enterprise architecture documentation, including solution designs, integration patterns, runbooks, and standard operating procedures
Develop technical standards and best practices for Okta implementation and management
Create detailed technical specifications and design documents for complex integrations
Maintain configuration management database (CMDB) entries for Okta components

Training and Enablement

Develop and deliver advanced training programs for IT staff and administrators on Okta capabilities and best practices
Provide mentorship and career development guidance to junior team members
Conduct knowledge transfer sessions and workshops for stakeholders
Stay current with the latest Okta features, IAM trends, security best practices, and industry standards through continuous learning and professional development

Vendor and Stakeholder Management

Serve as the primary technical liaison with Okta support and professional services
Participate in vendor roadmap discussions and provide feedback on product enhancements
Present technical solutions and recommendations to senior leadership and business stakeholders
Translate complex technical concepts into business value propositions

Work Environment and Physical Demands:

This is primarily a Telework position with a requirement to be onsite up to two (2) days a week
If alternate worksite is other than DCSA facilities or corporate office space, must have the reliable ability to communicate over voice (cell phone preferred) and stable, capable internet connection
Must be able to communicate complex technical ideas to a diverse customer base both verbally and in written form