IAM Engineer, Okta Integration

This is a fully remote position, open to applicants in United States.

📋 Description

• Configure, manage, and enhance the Okta Identity Engine (OIE) for Department of Defense (DoD) enterprise identity workflows.

• Implement and provide support for the Okta Embedded SDK to ensure secure standardized authentication in partner applications.

• Develop and improve mobile identity integrations for native iOS and Android platforms that support DoD mission applications.

• Implement OAuth 2.0, OpenID Connect (OIDC), and PKCE protocols.

• Configure phishing-resistant authentication methods, including FIDO2/WebAuthn.

• Design and maintain adaptive and risk-based authentication policies.

• Integrate identity federation services, such as OIDC and SAML 2.0, with external Identity Providers.

• Manage the lifecycles of JWT, ID, Access, and Refresh tokens.

• Implement secure API authentication utilizing OAuth scopes, claims, and structured authorization patterns.

• Create identity automation solutions using Okta Workflows and no-code/low-code orchestration tools.

• Integrate Okta with authoritative data sources and enterprise IAM services within the DoD.

• Provide support for provisioning, deprovisioning, profile management, and attribute governance.

• Troubleshoot issues related to identity, federation, and mobile SDK integration across DoD environments.

• Utilize REST APIs, Postman, and other related tools for API development, testing, and validation.

• Collaborate with DevSecOps teams to integrate IAM capabilities into CI/CD pipelines.

• Ensure compliance with DoD Risk Management Framework (RMF), DISA Security Technical Implementation Guides (STIGs), NIST SP 800-63, and other Federal cybersecurity regulations.

⛳️ Requirements

• 5 years of experience with a BA/BS, 3 years with an MS/MA, no years with a PhD, or 9 years with a high school diploma.

• Experience in configuring and managing either the Okta Classic Engine or the Okta Identity Engine (OIE).

• Ability to obtain and maintain a Public Trust clearance.

• U.S. Citizenship is required.

• Experience in implementing the Okta Embedded SDK and designing secure custom authentication flows.

• Strong understanding of OAuth 2.0, OIDC, PKCE, and related identity protocols.

• Experience in implementing FIDO2/WebAuthn for phishing-resistant authentication.

• Background in developing adaptive and risk-based authentication policies.

• Strong experience in identity federation and IdP integrations (OIDC, SAML 2.0).

• Experience integrating secure mobile authentication solutions for native iOS and Android applications.

• Knowledge of authentication token lifecycle management.

• Experience designing structured API authorization models using OAuth scopes and claims.

• Familiarity with identity lifecycle processes, provisioning, and directory synchronization.

• Strong troubleshooting abilities related to authentication, federation, and SDK integrations.

• Experience working with REST APIs and tools like Postman.

• Understanding of NIST 800 SP68.

• Preferred: Okta Certified Administrator or Okta Certified Professional.

• Preferred: Security + Certification.

• Preferred: Hands-on experience with the Okta Identity Engine Embedded SDK for native app authentication.

• Preferred: Experience supporting large-scale implementations.

• Preferred: Knowledge of NIST SP 800-63 Digital Identity Guidelines.

• Preferred: Experience with CAC/PIV, derived credentials, or mobile credential solutions.

• Preferred: Experience integrating identity proofing, identity verification, or credential issuance services.

🏝️ Benefits

• Medical insurance.

• Dental insurance.

• Vision insurance.

• Life insurance.

• Health savings account.

• Short-term disability.

• Long-term disability.

• Employee assistance program (EAP).

• Parental leave.

• 401(k) plan.

• Paid time off (PTO) for vacation.

• Company-paid holidays.

• Eligible employees may have the opportunity for overtime.

• Shift differential available.

• Discretionary bonus opportunities.