Okta IAM – Identity Integration Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Configure, manage, and enhance the Okta Identity Engine (OIE) to facilitate DoD enterprise identity workflows.

• Implement and maintain the Okta Embedded SDK to ensure secure and standardized authentication for partner applications.

• Develop and improve mobile identity integrations for native iOS and Android platforms that support DoD mission applications.

• Apply modern identity standards such as OAuth 2.0, OpenID Connect (OIDC), and PKCE.

• Set up phishing-resistant authentication methods, including FIDO2/WebAuthn, in accordance with DoD Zero Trust objectives.

• Design and uphold adaptive and risk-based authentication policies.

• Integrate identity federation services (OIDC, SAML 2.0) along with external Identity Provider (IdP) connections.

• Oversee authentication token lifecycles (JWT, ID, Access, Refresh tokens) throughout the DoD application ecosystems.

• Implement secure API authentication utilizing OAuth scopes, claims, and structured authorization patterns.

• Create identity automation processes using Okta Workflows and no-code/low-code orchestration tools.

• Connect Okta with DoD authoritative data sources and enterprise-level IAM services.

• Assess and document various Okta Mobile implementation alternatives and contribute to the Government Analysis of Alternatives (AoA).

• Design headless authentication architectures that support embedded mobile authentication.

• Develop reusable authentication services that cater to multiple relying-party mobile applications.

• Design secure device-bound credential registration and provisioning processes.

• Assist in Configuration Control Board (CCB) reviews and technical architecture presentations.

• Create alternative MFA pathways for users lacking CAC credentials.

• Develop proxy authentication capabilities that support beneficiary relationships.

• Assist with identity lifecycle processes, including provisioning, deprovisioning, profile management, and attribute governance.

• Troubleshoot complex issues related to identity, federation, and mobile SDK integrations across multiple DoD product environments.

• Utilize REST APIs, Postman, and other related tools for API development, testing, and validation.

• Collaborate with DevSecOps teams to integrate IAM capabilities into CI/CD pipelines that support DoD modernization.

• Ensure that identity implementations adhere to DoD RMF, DISA STIGs, NIST SP 800‑63, and other federal cybersecurity mandates.

⛳️ Requirements

• 5 years of experience with a BS/BA; 3 years with an MS/MA; 0 years with a PhD.

• Ability to obtain and maintain a Public Trust.

• U.S. Citizenship is required.

• Experience in configuring and managing Okta Identity Engine (OIE).

• Experience in implementing Okta Embedded SDK and designing secure custom authentication flows.

• Strong knowledge of OAuth 2.0, OIDC, PKCE, and related identity protocols.

• Experience in implementing FIDO2/WebAuthn for phishing-resistant authentication.

• Experience in developing adaptive/risk-based authentication policies.

• Strong background in identity federation and IdP integrations (OIDC, SAML 2.0).

• Experience in developing secure mobile authentication for native iOS and Android.

• Deep understanding of authentication token lifecycle management.

• Experience in designing structured API authorization models using OAuth scopes and claims.

• Experience with Okta Workflows, identity automation, and enterprise identity integrations.

• Experience with identity lifecycle processes, provisioning, and directory synchronization.

• Strong troubleshooting skills related to authentication, federation, and SDK integrations.

• Experience working with REST APIs and tools such as Postman.

• Familiarity with DevSecOps, CI/CD pipelines, and secure configuration management.

• Experience supporting RMF, STIG, DoD cybersecurity compliance, and Federal ICAM requirements.

🏝️ Benefits

• This position offers a comprehensive benefits package.

• EEO: An equal opportunity employer, including individuals with disabilities and protected veterans, as well as other legally protected characteristics.