Role: Lead Okta Identity Operations Engineer (L2 / L3 / Architect)
Location: Remote USA
Okta / IAM fundamentals
SAML/OIDC onboarding
AD troubleshooting
Okta Verify / MFA
Production troubleshooting
OIDC 400 troubleshooting
Kerberos
Okta APIs
Scripting / automation
AD/RADIUS agent upgrades
Certificate renewal
Job description:
Position Summary
We are seeking an elite, hands-on Okta IAM Operations Engineer & Architect to spearhead the administration, tier-3 incident resolution, architecture, and new feature development of our enterprise-wide Identity and Access Management ecosystem.
In this multi-faceted role, you will bridge the gap between day-to-day operational stability (L2/L3 support) and visionary engineering. You will own our complete identity continuum-spanning B2E (Workforce/Employee Identity), B2B (Partner/Federated Access), and B2C (Customer Identity/Auth0 or Okta CIAM)-ensuring frictionless, highly secure, and resilient authentication and authorization flows.
Key Responsibilities
1. Architecture, Design & New Development (Architect Level)
Roadmap & Design: Architect, design, and deploy scalable, enterprise-grade Okta IAM solutions supporting B2E, B2B, and B2C architectures across multi-cloud and hybrid environments.
New Integrations & Customizations: Drive greenfield development projects, including custom app integrations (SAML, OIDC/OAuth 2.0), API-driven provisioning, lifecycle management (LCM) workflows, and hooks.
CIAM/B2C Engineering: Design secure, scalable customer identity journeys using Okta CIAM / Auth0, featuring custom branding, progressive profiling, self-service registration, and social identity providers.
B2B Federation: Implement complex cross-company federations, inbound/outbound SAML/WS-Fed, and Okta Access Gateway (OAG) for legacy on-premise applications.
2. Operations, Engineering & Escalation Support (L2/L3 Level)
Tier-3 Troubleshooting: Serve as the ultimate escalation point for complex, production-impacting identity failures, authentication loops, replication latency, and federation certificate expirations.
Platform Administration: Oversee day-to-day tenant health, security configurations, multifactor authentication (MFA/Adaptive MFA) policies, Sign-On policies, and API security.
Lifecycle & Automation: Automate routine operational tasks, user provisioning/deprovisioning workflows, and administrative tasks using Terraform, Python, or Okta Workflows to minimize manual overhead.
Monitoring & Compliance: Maintain robust monitoring, logging, and SIEM integration (e.g., Splunk/Datadog) for Okta System Log events to proactively detect identity threats, anomalies, and compliance gaps.
Required Qualifications & Skills
Technical Expertise
Experience: 8+ years of IT experience with at least 5+ years specializing exclusively in Enterprise Identity and Access Management (IAM), with a heavy focus on the Okta platform.
Ecosystem Mastery: Deep, hands-on administrative and architectural experience across:
o B2E: Okta Workforce Identity Cloud (WIC), Lifecycle Management (LCM), HRIS integrations (Workday, BambooHR), Universal Directory (UD), and Advanced Server Access (ASA).
o B2B: Org2Org federation, dynamic groups, B2B integration networks, and secure partner access controls.
o B2C: Okta Customer Identity Cloud (powered by Auth0) or Okta CIAM, OIDC/OAuth 2.0 authorization code flows, and custom UI/SDK integrations.
Protocols & Standards: Expert-level understanding of SAML 2.0, OIDC, OAuth 2.0, SCIM, LDAP, Active Directory, RADIUS, and REST APIs.
Infrastructure as Code & Scripting: Proficiency in Terraform (Okta Terraform Provider), Python, or PowerShell for automating IAM tasks and managing configurations as code.
Core Competencies
Troubleshooting Mindset: Exceptional analytical and debugging capabilities for complex root-cause analysis during high-severity L3 incidents.
Security First: Strong grounding in Zero-Trust architecture principles, threat modeling, least-privilege access, and compliance frameworks (SOC 2, ISO 27001, NIST).
Preferred Qualifications
Certifications: Active Okta Certified Professional, Administrator, Developer, or Consultant/Architect certifications.
DevSecOps Familiarity: Experience integrating identity testing into CI/CD pipelines and utilizing source control (GitHub/GitLab) for Okta configurations.
...Experience supporting seniors or individuals with disabilities Benefits Flexible scheduling with full-time, part-time, weekend, overnight (awake and sleep), and live-in shifts available Supportive local office team to assist you Opportunity for meaningful, one-...
...Job Title: Travel Advisor University Team Department: Operations Reports... ...Ensure compliance with DOT regulations, TSA requirements, passport and visa requirements, and... ...regulations Maintain awareness of international travel advisories, entry requirements,...
...buff and wax exterior of vehicles with attention to detail and care* Pressure wash vehicles with no damage to vehicle* Able to read and follow direction* Clean and prep new vehicles for the sales lot* Clean and prep used vehicles for sales lot* Visually inspect...
...check in and out procedures to ensure transactions are accurately balanced in terms of charges, payments, and guest billing. ~Post in back office, Daily guest scores and Office communication items ~Responds to guest issues in a professional and timely manner while...
...Occupational Therapist School-Based Location: Elmira, NY Schedule: Full Time | School-Based Salary: $70,990.40 $87,360 annually A Unique OT Opportunity with Variety We are seeking a licensed Occupational Therapist for a unique full-time opportunity...