IAM Engineer

What success looks like in this role:

Position Summary

Unisys CSS is seeking an experienced Team Lead for Identity and Access Management to lead the delivery, operations, and engineering of enterprise IAM services, with a primary focus on Okta . This role is responsible for leading a technical team, managing customer-facing IAM service delivery, and ensuring secure, reliable, and scalable identity solutions across complex environments.

The ideal candidate will have deep hands-on experience with Okta administration, engineering, integrations, automation, and lifecycle management , as well as strong knowledge of SCIM, SAML, OIDC, Active Directory, APIs, and identity architecture principles . This individual must be delivery-oriented, comfortable working directly with customers and account teams, and capable of balancing technical execution with leadership, service management, and client success.

Public sector experience is preferred. Experience supporting public sector security and compliance requirements, including FedRAMP, DISA IL4, DISA IL5, DoD, or federal security frameworks , is strongly preferred.

Key Responsibilities

IAM Operations and Engineering

Lead day-to-day operations and engineering activities for enterprise IAM services, with a focus on Okta.

Design, configure, maintain, and improve Okta environments, including applications, groups, policies, workflows, lifecycle management, authentication flows, and integrations.

Support and engineer integrations using identity standards and protocols, including:

• SCIM
• SAML 2.0
• OIDC / OAuth 2.0
• LDAP
• Active Directory integrations
• API-based provisioning and automation

Provide technical leadership for identity lifecycle processes, including joiner, mover, leaver workflows, access provisioning, deprovisioning, group management, and entitlement management.

Troubleshoot complex IAM issues involving authentication, authorization, provisioning, federation, directory synchronization, and application access.

Support Okta integrations with cloud platforms, SaaS applications, enterprise directories, and customer environments.

Develop and maintain documentation, runbooks, architectural diagrams, integration patterns, and operational procedures.

Team Leadership and Management

Lead, mentor, and support a team of IAM engineers and administrators.

Assign work, manage priorities, support escalation paths, and ensure high-quality delivery across the team.

Provide technical guidance, coaching, and performance feedback to team members.

Help establish team standards, operational processes, quality controls, and delivery expectations.

Act as the escalation point for complex technical, operational, and customer-facing issues.

Promote a culture of accountability, collaboration, continuous improvement, and customer-focused delivery.

Architecture and Technical Strategy

Contribute to IAM architecture, solution design, and technical roadmaps.

Evaluate customer requirements and translate them into secure, scalable IAM solutions.

Apply sound architecture principles across identity federation, access control, directory services, automation, integration, and service delivery.

Understand and apply API principles, including REST APIs, authentication methods, authorization models, rate limits, error handling, and automation use cases.

Identify opportunities to improve IAM reliability, security, automation, scalability, and operational efficiency.

Partner with security, cloud, infrastructure, application, and compliance teams to align IAM solutions with enterprise requirements.

Service Delivery and Customer Success

Serve as a customer-facing technical leader for IAM operations and engineering.

Communicate clearly with customers, client stakeholders, account executives, project managers, and internal delivery teams.

Support service delivery objectives, including incident response, request fulfillment, change management, problem management, and operational reporting.

Understand and manage service delivery metrics such as:

• MTTR
• SLA performance
• Incident volume and trends
• Request fulfillment times
• Change success rates
• Operational risk and backlog

Drive timely resolution of customer issues while maintaining quality, security, and compliance.

Support customer success activities by understanding customer goals, identifying risks, communicating status, and helping ensure successful outcomes.

Participate in project planning, implementation tracking, stakeholder communication, and delivery coordination.

You will be successful in this role if you have:

Strong hands-on experience with Okta operations and engineering .

Experience administering, configuring, troubleshooting, and integrating Okta in enterprise environments.

Strong understanding of identity protocols and standards, including SCIM, SAML, OIDC, and OAuth 2.0 .

Experience with Active Directory , including users, groups, organizational units, group policy concepts, LDAP, directory synchronization, and hybrid identity patterns.

Experience leading or managing technical teams, including task assignment, mentoring, escalation management, and delivery oversight.

Strong understanding of IAM architecture principles, including federation, provisioning, authentication, authorization, lifecycle management, and access governance.

Experience working with APIs, automation, and integration patterns.

Ability to troubleshoot complex IAM, authentication, provisioning, and directory-related issues.

Strong written and verbal communication skills.

Experience communicating directly with customers, client stakeholders, account executives, and technical teams.

Strong service delivery mindset with an understanding of operational metrics, SLAs, MTTR, incident management, and continuous improvement.

Ability to manage competing priorities in a fast-paced customer-facing environment.

Preferred Qualifications

Public sector experience, including federal, state, local, education, defense, or regulated government environments.

Experience supporting security and compliance requirements such as:

• FedRAMP
• DISA IL4 / IL5
• DoD Cloud Computing SRG
• NIST 800-53
• FISMA
• Zero Trust architectures
• CMMC or other federal security frameworks

Customer success experience in a managed services, consulting, SaaS, cloud, or enterprise technology environment.

Project management experience, including project planning, status reporting, stakeholder communication, risk management, and delivery tracking.

Experience with Okta Workflows, Okta Lifecycle Management, Okta API, Okta Identity Governance, or Okta Access Gateway.

Experience with ITSM platforms and processes, such as ServiceNow, Jira Service Management, incident management, change management, and problem management.

Experience supporting identity services in cloud environments such as AWS, Azure, Google Cloud, or government cloud environments.

Relevant certifications are a plus, such as Okta Certified Administrator, Okta Certified Professional, CISSP, Security+, ITIL, PMP, or cloud certifications.

Core Competencies

The successful candidate will demonstrate:

• Technical leadership in IAM and Okta environments
• Strong customer-facing communication skills
• Ownership and accountability for service delivery outcomes
• Ability to lead teams through complex operational and engineering challenges
• Strong troubleshooting and problem-solving skills
• Understanding of public sector security expectations
• Ability to balance hands-on technical work with leadership responsibilities
• Delivery orientation with a focus on reliability, responsiveness, and measurable outcomes
  

#LI-JV1

This role may require access to export-controlled commodities and technology. Therefore, to conform to U.S. export control regulations, applicant should be eligible for any required authorizations from the U.S. Government.

Unisys is proud to be an equal opportunity employer that considers all qualified applicants without regard to age, caste, citizenship, color, disability, family medical history, family status, ethnicity, gender, gender expression, gender identity, genetic information, marital status, national origin, parental status, pregnancy, race, religion, sex, sexual orientation, transgender status, veteran status or any other category protected by law.

This commitment includes our efforts to provide for all those who seek to express interest in employment the opportunity to participate without barriers. If you are a US job seeker unable to review the job opportunities herein, or cannot otherwise complete your expression of interest, without additional assistance and would like to discuss a request for reasonable accommodation, please contact our Global Recruiting organization at View email address on click.appcast.io or alternatively Toll Free: View phone number on click.appcast.io (Prompt 4). US job seekers can find more information about Unisys' EEO commitment here.