OIG Engineer (Okta) for IGA Configuration

Software Guidance & Assistance, Inc., (SGA), is searching for an OIG Engineer (Okta) for a CONTRACT assignment with one of our premier Management Consulting clients in Atlanta, GA. It is a big preference if a candidate is local to the Atlanta/Alpharetta area and can work a hybrid schedule (flexible), however remote candidates able to support EST working hours will be considered. Must have Okta Administrator and Developer certifications. Any experience migrating from another IAM system to Okta is a major plus (particularly coming from Tivoli)

Responsibilities:
As an OIG Sr. Developer, you will collaborate closely with cross-functional teams, including IT operations, security, application development, and business stakeholders. You will work alongside other IGA professionals to ensure the seamless migration and implementation of our identity governance processes. You will be responsible for migrating the IGA process and applications from the legacy IBM Tivoli Identity Management system to Okta Identity Governance (OIG). This role involves implementing and configuring OIG features, including Lifecycle Management, Access Certification, Okta Workflows, and various automation tools. You will design, develop, and maintain identity and access management solutions, ensuring compliance with security best practices and company policies. You'll play a pivotal role in this large-scale project, ensuring a smooth transition and leveraging Okta's automation capabilities to streamline IGA processes.

• Partner with stakeholders to define the target state for the OIG implementation, mapping ITIM functionalities to equivalent or improved OIG features.
• Develop a comprehensive migration plan outlining the sequence of tasks, resource requirements,
• Lead the migration of JML processes and applications from Legacy IGA solution to Okta Identity Governance.
• Configure and deploy Okta Lifecycle Management, Access Certification, and other OIG components.
• Integrate various applications with Okta using JDBC, REST web services, Active Directory, and other directory services.
• Configure Okta Identity Governance to align with the defined target state, encompassing user lifecycle management, access request workflows, access certifications, and integrations with various applications.
• Hands-on development/coding and implement Okta Workflows, including automation, inline hooks, event hooks, custom OIG connectors and delegated flows.
• Create and maintain automation scripts to streamline identity and access management tasks.
• Implement access governance and access request workflows to ensure proper access control and certification processes.
• Conduct access reviews and certifications, ensuring compliance with organizational policies and regulations.
• Work closely with IT, security, and application development teams to ensure seamless integration and operation of identity governance solutions.
• Provide support and troubleshooting for identity and access management issues.
• Design and execute rigorous test plans to validate the migrated OIG solution's functionality, performance, and security.
• Collaborate with security and engineering teams to ensure seamless integration with existing infrastructure and applications.
• Maintain detailed documentation of configurations, workflows, and processes.
• Generate reports and metrics to track the effectiveness and efficiency of identity governance solutions.
• Provide ongoing support to users during and after the migration, facilitating a smooth transition and addressing any emerging issues.
• Monitor the OIG implementation for optimal performance, proactively troubleshooting any problems.
• Complete the assigned engagement tasks within the project scope and budget, while meeting deliverable requirements
• Stay up to date with the latest IAM trends, technologies, and best practices.
• Propose and implement improvements to enhance the security and functionality of our identity governance processes.

Required Skills:

• Years of IT professional experience Minimum 6
• Years of IT Security Experience Minimum 4
• Proven experience (3+ years) working with Identity and Access Management (IAM) solutions in a complex enterprise environment.
• 3+ years of experience working with Okta Identity cloud and its core functionalities, including Lifecycle Management, Access Governance, Workflows, okta native API integrations, and scripting languages (Python, JavaScript).
• Certified as Okta Certified Administrator is mandatory.
• Okta certified Developer certification is mandatory.
• Certified as Okta Certified workflow is nice to have
• More than 2 years of hands-on experience implementing custom identity solutions with Okta
• Experience using Okta API Access Management to secure APIs
• Experience using Okta REST APIs and knowing how to pass the correct API parameters in requests.
• Experience assigning and unassigning apps to users using Okta Users and Groups APIs
• Understanding of the design principles of Okta APIs, including how to use pagination and how to filter query parameters on attributes
• Experience using Okta APIs to query logs and events
• Understanding of the various Okta supported OIDC and OAuth flows, and knowledge of when to use them
• Understanding of how an Okta policy and the rules associated with that policy affect API calls and responses
• Knowledge of how to enforce Okta multifactor authentication for users in client apps
• Knowledge of how to interpret the common Okta API error codes
• Strong understanding of IAM concepts, including user provisioning, authentication protocols (SAML, OAuth), directory services, and security best practices.
• Analytical mindset with a focus on data-driven decision-making, problem-solving, and continuous improvement.
• Proficiency in version control systems (Git) and CI/CD pipelines for effective code management and deployment.
• Familiarity with security best practices and secure coding principles.
• Okta Identity Governance (Lifecycle Management, Access Certification, Okta Workflows, Access Governance)
• Experience integrating on-premises applications with a SSO solution and integrating multiple IdPs using SAML / OIDC
• Experience making API calls to the Okta API or another Identity Provider API
• Experience with creating sequence diagrams depicting AuthN flows and IGA processes
• Experience with JML processes
• Directory integration (e.g., Active Directory)
• Relational databases knowledge, including cloud-based warehousing and analytics using Snowflake.
• Strong Knowledge of Python or Java programming languages.
• Experience with RESTful web services and JDBC integration
• Familiarity with security frameworks and best practices

Preferred Skills:

• Experience with cloud platforms (AWS, Azure) - nice to have.
• Experience with infrastructure as code (IaC) tools (Terraform, Ansible) - nice to have.

SGA is a technology and resource solutions provider driven to stand out. We are a women-owned business. Our mission: to solve big IT problems with a more personal, boutique approach. Each year, we match consultants like you to more than 1,000 engagements. When we say let's work better together, we mean it. You'll join a diverse team built on these core values: customer service, employee development, and quality and integrity in everything we do. Be yourself, love what you do and find your passion at work. Please find us at .

SGA is an Equal Opportunity Employer and does not discriminate on the basis of Race, Color, Sex, Sexual Orientation, Gender Identity, Religion, National Origin, Disability, Veteran Status, Age, Marital Status, Pregnancy, Genetic Information, or Other Legally Protected Status. We are committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, and our services, programs, and activities. Please visit our company to request an accommodation or assistance regarding our policy.