Senior Okta IAM Engineer

Applicants must be authorized to work for any employer in the U.S. without sponsorship. We are unable to provide sponsorship for work visas of any kind at the time of hire, or at any point during employment. This includes, but is not limited to: F1-OPT, F1-CPT, H-1B, TN, J-1, etc

Your Role:

As a Senior IAM Engineer within our IAM and Corporate Applications team, you will lead the design, automated deployment, and administration of our Okta enterprise identity platform. Your core responsibilities include architecting, writing, and maintaining scalable Terraform modules to provision and manage Okta applications, groups, authentication policies, authorization rules, and admin role assignments. You will manage Okta Workforce Identity Cloud configurations such as SSO, MFA, Adaptive Authentication, Universal Directory, and Workflows. Additionally, you will automate user onboarding, offboarding, and role-based provisioning (SCIM, SAML, OIDC) across cloud infrastructure and enterprise software. You will enforce Least Privilege Access and Zero Trust policies, assist with compliance reporting (SOX, SOC2, ISO 27001), integrate Okta Terraform workflows into continuous deployment pipelines (GitHub/Jenkins CI/CD), and serve as a subject matter expert for complex identity integrations and incident escalations.

Your Opportunity:

• Step in as the primary subject matter expert for all Okta-related initiatives across our enterprise environment.
• Leverage Terraform to manage Okta resources and configurations, driving scalable lifecycle management processes and seamless user access control across a secure environment.
• Assist with managing a broader suite of corporate applications, including Google Workspace, Slack, GitHub, and Atlassian Jira & Confluence.
• Play a key role in supporting the adoption and integration of emerging AI platforms related to corporate application infrastructure.

What You'll Need:

• 8+ years of hands-on experience designing and managing Okta enterprise environments and IAM.
• 3+ years of production experience using Terraform to manage identity providers (specifically the Okta Terraform provider), custom modules, state management, and continuous deployment pipelines.
• To be considered for this role, you must have the ability to commute to our Columbia, MD office three days a week. Hybrid.
• Deep understanding of identity protocols including SAML 2.0, OAuth 2.0, OIDC, SCIM, and LDAP.
• Experience with scripting and automation using Python, Bash, or PowerShell, and interacting directly with Okta REST APIs.

And Ideally:

• Experience with Okta Workflows, Okta Identity Governance (OIG), or Privileged Access Management (PAM) integrations.
• Experience operating within multi-cloud environments (AWS, GCP, Azure).
• A proven track record in enterprise application onboarding automation and directory consolidation.

#LI-Hybrid #LI-LP1