Lead Okta Identity Operations Engineer (L2 / L3 / Architect)

****** Interviews will be based on :

• Okta / IAM fundamentals
• SAML/OIDC onboarding
• AD troubleshooting
• Okta Verify / MFA
• Production troubleshooting
• OIDC 400 troubleshooting
• Kerberos
• Okta APIs
• Scripting / automation
• AD/RADIUS agent upgrades
• Certificate renewal

Position Summary

We are seeking an elite, hands-on Okta IAM Operations Engineer & Architect to spearhead the administration, tier-3 incident resolution, architecture, and new feature development of our enterprise-wide Identity and Access Management ecosystem. In this multi-faceted role, you will bridge the gap between day-to-day operational stability (L2/L3 support) and visionary engineering. You will own our complete identity continuum—spanning B2E (Workforce/Employee Identity), B2B (Partner/Federated Access), and B2C (Customer Identity/Auth0 or Okta CIAM)—ensuring frictionless, highly secure, and resilient authentication and authorization flows.

Key Responsibilities

1. Architecture, Design & New Development (Architect Level)

• Roadmap & Design: Architect, design, and deploy scalable, enterprise-grade Okta IAM solutions supporting B2E, B2B, and B2C architectures across multi-cloud and hybrid environments.
• New Integrations & Customizations: Drive greenfield development projects, including custom app integrations (SAML, OIDC/OAuth 2.0), API-driven provisioning, lifecycle management (LCM) workflows, and hooks.
• CIAM/B2C Engineering: Design secure, scalable customer identity journeys using Okta CIAM / Auth0, featuring custom branding, progressive profiling, self-service registration, and social identity providers.
• B2B Federation: Implement complex cross-company federations, inbound/outbound SAML/WS-Fed, and Okta Access Gateway (OAG) for legacy on-premise applications.

2. Operations, Engineering & Escalation Support (L2/L3 Level)

• Tier-3 Troubleshooting: Serve as the ultimate escalation point for complex, production-impacting identity failures, authentication loops, replication latency, and federation certificate expirations.
• Platform Administration: Oversee day-to-day tenant health, security configurations, multifactor authentication (MFA/Adaptive MFA) policies, Sign-On policies, and API security.
• Lifecycle & Automation: Automate routine operational tasks, user provisioning/deprovisioning workflows, and administrative tasks using Terraform, Python, or Okta Workflows to minimize manual overhead.
• Monitoring & Compliance: Maintain robust monitoring, logging, and SIEM integration (e.g., Splunk/Datadog) for Okta System Log events to proactively detect identity threats, anomalies, and compliance gaps.

Required Qualifications & Skills

Technical Expertise

• Experience: 8+ years of IT experience with at least 5+ years specializing exclusively in Enterprise Identity and Access Management (IAM), with a heavy focus on the Okta platform.
• Ecosystem Mastery: Deep, hands-on administrative and architectural experience across:
  • B2E: Okta Workforce Identity Cloud (WIC), Lifecycle Management (LCM), HRIS integrations (Workday, BambooHR), Universal Directory (UD), and Advanced Server Access (ASA).
  • B2B: Org2Org federation, dynamic groups, B2B integration networks, and secure partner access controls.
  • B2C: Okta Customer Identity Cloud (powered by Auth0) or Okta CIAM, OIDC/OAuth 2.0 authorization code flows, and custom UI/SDK integrations.
• Protocols & Standards: Expert-level understanding of SAML 2.0, OIDC, OAuth 2.0, SCIM, LDAP, Active Directory, RADIUS, and REST APIs.
• Infrastructure as Code & Scripting: Proficiency in Terraform (Okta Terraform Provider), Python, or PowerShell for automating IAM tasks and managing configurations as code.

Core Competencies

• Troubleshooting Mindset: Exceptional analytical and debugging capabilities for complex root-cause analysis during high-severity L3 incidents.
• Security First: Strong grounding in Zero-Trust architecture principles, threat modeling, least-privilege access, and compliance frameworks (SOC 2, ISO 27001, NIST).

Preferred Qualifications

• Certifications: Active Okta Certified Professional, Administrator, Developer, or Consultant/Architect certifications.
• DevSecOps Familiarity: Experience integrating identity testing into CI/CD pipelines and utilizing source control (GitHub/GitLab) for Okta configurations