Job Description
This person is the technical lead, directing two Sr. Software Engineers who work with application teams on remediation.
Responsibilities
- Assess the Okta topology (new OIE dev tenant, Classic preview and production) and inventory application integrations
- Map Classic Global Session, App Sign-On, and Adaptive MFA policies to equivalent OIE policies
- Identify OIE impacts by integration type: SAML, OAuth/OIDC, SDK, REST API, Sign-In Widget, inbound federation
- Determine which apps need the Interaction Code grant and define required Okta configuration changes per app
- Implement policy and inbound federation changes; support EWS Okta admins through dev, preview, and production releases
- Plan and support production cutover and hypercare
Required
- 10+ years in identity and access management, including 5+ years hands-on Okta administration or architecture
- Hands-on Okta Classic to OIE upgrade experience
- Deep OIE knowledge: authentication policies, global session policies, authenticators, Interaction Code grant
- Expert SAML 2.0, OAuth 2.0, and OIDC, including troubleshooting live authentication flows
- Inbound federation (IdP routing rules, external IdPs)
- Okta Sign-In Widget (embedded and redirect) and Okta APIs
- Able to lead and direct other engineers and present to client stakeholders
Preferred
- Okta Certified Consultant, Administrator, or Developer
- Large-scale workforce and customer identity (100,000+ users)
- Financial services experience
- Salesforce and SaaS SSO integrations; Okta Terraform provider
Our benefits package includes: (EXCLUDE on perm placements)
- Comprehensive medical benefits
- Competitive pay
- 401(k) retirement plan
- …and much more!