Job Description Summary: Senior Okta & IAM Systems Engineer
Primary Focus
Okta Operations,
M&A Identity Tenant Migration, and
Legacy IAM Application Modernization
Operations & Okta Platform Support
Manage day-to-day operations, health monitoring, and administration of Okta (OIE / Identity Engine, Universal Directory, Adaptive MFA, Lifecycle Management, Workflows, Okta Access Gateway).
Tier 3 support for identity escalations, authentication failures, API token issues, and provisioning sync errors.
Governance, RBAC/ABAC policy enforcement, and operational scripting via API, PowerShell, and Python.
M&A / Subsidiary Identity Migration
Lead the end-to-end technical consolidation of identity infrastructures, user accounts, groups, and directory services from a recently acquired subsidiary into the parent company’s enterprise Okta tenant.
Normalize user schemas, reconcile attribute conflicts, establish co-existence strategies, and execute seamless cutover waves.
Legacy IAM Application Onboarding & Modernization
Assess and migrate enterprise applications off legacy IAM platforms (e.g., ADFS, Ping Federate, CA SiteMinder, Oracle IAM, standalone LDAP/Kerberos) to Okta.
Implement standard modern federation and provisioning protocols (SAML 2.0, OpenID Connect / OIDC, OAuth 2.0, SCIM).
Utilize Okta Access Gateway (OAG) for legacy on-premises web apps requiring header or cookie-based authentication.
Required Qualifications & Experience
Experience: 8+ years in Enterprise IAM / Security, with 5+ years specifically in Okta administration and engineering.
Core Competencies: Okta OIE, Universal Directory, Tenant-to-Tenant Migrations, SAML 2.0/OIDC/SCIM, Active Directory consolidation.
Certifications (Preferred): Okta Certified Administrator, Consultant, or Professional.