Lead Okta Identity Operations Engineer - Remote

Role: Lead Okta Identity Operations Engineer (L2 / L3 / Architect)

Location: Remote USA




Okta / IAM fundamentals
SAML/OIDC onboarding
AD troubleshooting
Okta Verify / MFA
Production troubleshooting
OIDC 400 troubleshooting
Kerberos
Okta APIs
Scripting / automation
AD/RADIUS agent upgrades
Certificate renewal

Job description:

Position Summary




We are seeking an elite, hands-on Okta IAM Operations Engineer & Architect to spearhead the administration, tier-3 incident resolution, architecture, and new feature development of our enterprise-wide Identity and Access Management ecosystem.
In this multi-faceted role, you will bridge the gap between day-to-day operational stability (L2/L3 support) and visionary engineering. You will own our complete identity continuum-spanning B2E (Workforce/Employee Identity), B2B (Partner/Federated Access), and B2C (Customer Identity/Auth0 or Okta CIAM)-ensuring frictionless, highly secure, and resilient authentication and authorization flows.




Key Responsibilities




1. Architecture, Design & New Development (Architect Level)
Roadmap & Design: Architect, design, and deploy scalable, enterprise-grade Okta IAM solutions supporting B2E, B2B, and B2C architectures across multi-cloud and hybrid environments.
New Integrations & Customizations: Drive greenfield development projects, including custom app integrations (SAML, OIDC/OAuth 2.0), API-driven provisioning, lifecycle management (LCM) workflows, and hooks.
CIAM/B2C Engineering: Design secure, scalable customer identity journeys using Okta CIAM / Auth0, featuring custom branding, progressive profiling, self-service registration, and social identity providers.
B2B Federation: Implement complex cross-company federations, inbound/outbound SAML/WS-Fed, and Okta Access Gateway (OAG) for legacy on-premise applications.




2. Operations, Engineering & Escalation Support (L2/L3 Level)
Tier-3 Troubleshooting: Serve as the ultimate escalation point for complex, production-impacting identity failures, authentication loops, replication latency, and federation certificate expirations.
Platform Administration: Oversee day-to-day tenant health, security configurations, multifactor authentication (MFA/Adaptive MFA) policies, Sign-On policies, and API security.
Lifecycle & Automation: Automate routine operational tasks, user provisioning/deprovisioning workflows, and administrative tasks using Terraform, Python, or Okta Workflows to minimize manual overhead.
Monitoring & Compliance: Maintain robust monitoring, logging, and SIEM integration (e.g., Splunk/Datadog) for Okta System Log events to proactively detect identity threats, anomalies, and compliance gaps.




Required Qualifications & Skills




Technical Expertise
Experience: 8+ years of IT experience with at least 5+ years specializing exclusively in Enterprise Identity and Access Management (IAM), with a heavy focus on the Okta platform.
Ecosystem Mastery: Deep, hands-on administrative and architectural experience across:
o B2E: Okta Workforce Identity Cloud (WIC), Lifecycle Management (LCM), HRIS integrations (Workday, BambooHR), Universal Directory (UD), and Advanced Server Access (ASA).
o B2B: Org2Org federation, dynamic groups, B2B integration networks, and secure partner access controls.
o B2C: Okta Customer Identity Cloud (powered by Auth0) or Okta CIAM, OIDC/OAuth 2.0 authorization code flows, and custom UI/SDK integrations.
Protocols & Standards: Expert-level understanding of SAML 2.0, OIDC, OAuth 2.0, SCIM, LDAP, Active Directory, RADIUS, and REST APIs.
Infrastructure as Code & Scripting: Proficiency in Terraform (Okta Terraform Provider), Python, or PowerShell for automating IAM tasks and managing configurations as code.




Core Competencies
Troubleshooting Mindset: Exceptional analytical and debugging capabilities for complex root-cause analysis during high-severity L3 incidents.
Security First: Strong grounding in Zero-Trust architecture principles, threat modeling, least-privilege access, and compliance frameworks (SOC 2, ISO 27001, NIST).




Preferred Qualifications
Certifications: Active Okta Certified Professional, Administrator, Developer, or Consultant/Architect certifications.
DevSecOps Familiarity: Experience integrating identity testing into CI/CD pipelines and utilizing source control (GitHub/GitLab) for Okta configurations.