OKTA Engineer

The Okta Support Engineer has deep expertise in identity and access management (IAM), specializing in Okta’s Identity Cloud platform. Skilled in troubleshooting complex authentication issues, configuring SSO and MFA, managing user lifecycle integrations, and enforcing security policies. Proven ability to support enterprise environments, provide technical guidance, and collaborate with IT and security teams to ensure secure, seamless access across applications and infrastructure.

• Design, configure, and maintain Okta Universal Directory, SSO, MFA, and lifecycle management solutions.

• Implement and manage identity lifecycle workflows (provisioning, de-provisioning, group rules, etc.).

• Integrate Okta with SaaS, on-premise, and custom applications via SAML, OIDC, SCIM, or API.

• Maintain and optimize Okta policies, including adaptive MFA, device trust, and conditional access.

• Work closely with security and compliance teams to align Okta configurations with organizational policies and industry best practices.

• Automate user onboarding/offboarding and role-based access using tools like Workflows, Okta Hooks, or custom scripts.

• Monitor and troubleshoot authentication issues, including incident response support.

• Stay up-to-date with Okta product updates and IAM security trends.

• Document configurations, processes, and procedures, and provide user training when needed.

Required:

• 3+ years of hands-on experience with Okta administration and engineering.

• Strong understanding of identity protocols (SAML 2.0, OAuth 2.0, OIDC, SCIM).

• Experience implementing and managing SSO and MFA across a variety of platforms.

• Solid knowledge of IAM concepts, including RBAC, ABAC, and least privilege principles.

• Proficiency in writing scripts (PowerShell, Python, or similar) for automation.

• Familiarity with security compliance frameworks (e.g., SOC 2, ISO 27001).

• Strong analytical, troubleshooting, and communication skills.

• Fluent in English (written and spoken).

Preferred:

• Okta Certified Professional or Okta Certified Administrator certification.

• Experience with integrations involving Azure AD, Active Directory, AWS IAM, or Google Workspace.

• Exposure to Zero Trust security models and device trust policies.

• Background in security operations or IT infrastructure is a plus.