Lead Okta Identity Operations Engineer (L2 / L3 / Architect)

****** Interviews will be based on :

Okta / IAM fundamentals

SAML/OIDC onboarding

AD troubleshooting

Okta Verify / MFA

Production troubleshooting

OIDC 400 troubleshooting

Kerberos

Okta APIs

Scripting / automation

AD/RADIUS agent upgrades

Certificate renewal

Position Summary We are seeking an elite, hands-on Okta IAM Operations Engineer & Architect to spearhead the administration, tier-3 incident resolution, architecture, and new feature development of our enterprise-wide Identity and Access Management ecosystem. In this multi-faceted role, you will bridge the gap between day-to-day operational stability (L2/L3 support) and visionary engineering. You will own our complete identity continuum—spanning B2E (Workforce/Employee Identity), B2B (Partner/Federated Access), and B2C (Customer Identity/Auth0 or Okta CIAM)—ensuring frictionless, highly secure, and resilient authentication and authorization flows.

Key Responsibilities 1. Architecture, Design & New Development (Architect Level)

Roadmap & Design: Architect, design, and deploy scalable, enterprise-grade Okta IAM solutions supporting B2E, B2B, and B2C architectures across multi-cloud and hybrid environments.

New Integrations & Customizations: Drive greenfield development projects, including custom app integrations (SAML, OIDC/OAuth 2.0), API-driven provisioning, lifecycle management (LCM) workflows, and hooks.

CIAM/B2C Engineering: Design secure, scalable customer identity journeys using Okta CIAM / Auth0, featuring custom branding, progressive profiling, self-service registration, and social identity providers.

B2B Federation: Implement complex cross-company federations, inbound/outbound SAML/WS-Fed, and Okta Access Gateway (OAG) for legacy on-premise applications.

2. Operations, Engineering & Escalation Support (L2/L3 Level)

Tier-3 Troubleshooting: Serve as the ultimate escalation point for complex, production-impacting identity failures, authentication loops, replication latency, and federation certificate expirations.

Platform Administration: Oversee day-to-day tenant health, security configurations, multifactor authentication (MFA/Adaptive MFA) policies, Sign-On policies, and API security.

Lifecycle & Automation: Automate routine operational tasks, user provisioning/deprovisioning workflows, and administrative tasks using Terraform, Python, or Okta Workflows to minimize manual overhead.

Monitoring & Compliance: Maintain robust monitoring, logging, and SIEM integration (e.g., Splunk/Datadog) for Okta System Log events to proactively detect identity threats, anomalies, and compliance gaps.

Required Qualifications & Skills Technical Expertise

Experience: 8+ years of IT experience with at least 5+ years specializing exclusively in Enterprise Identity and Access Management (IAM), with a heavy focus on the Okta platform.

Ecosystem Mastery: Deep, hands-on administrative and architectural experience across:

B2E: Okta Workforce Identity Cloud (WIC), Lifecycle Management (LCM), HRIS integrations (Workday, BambooHR), Universal Directory (UD), and Advanced Server Access (ASA).

B2B: Org2Org federation, dynamic groups, B2B integration networks, and secure partner access controls.

B2C: Okta Customer Identity Cloud (powered by Auth0) or Okta CIAM, OIDC/OAuth 2.0 authorization code flows, and custom UI/SDK integrations.

Protocols & Standards: Expert-level understanding of SAML 2.0, OIDC, OAuth 2.0, SCIM, LDAP, Active Directory, RADIUS, and REST APIs.

Infrastructure as Code & Scripting: Proficiency in Terraform (Okta Terraform Provider), Python, or PowerShell for automating IAM tasks and managing configurations as code.

Core Competencies

Troubleshooting Mindset: Exceptional analytical and debugging capabilities for complex root-cause analysis during high-severity L3 incidents.

Security First: Strong grounding in Zero-Trust architecture principles, threat modeling, least-privilege access, and compliance frameworks (SOC 2, ISO 27001, NIST).

Preferred Qualifications

Certifications: Active Okta Certified Professional, Administrator, Developer, or Consultant/Architect certifications.

DevSecOps Familiarity: Experience integrating identity testing into CI/CD pipelines and utilizing source control (GitHub/GitLab) for Okta configurations

#J-18808-Ljbffr