Okta BAU Engineer

Job#: 3033601

Job Description:
Okta BAU Engineer

Location: Indianapolis, Indiana (Remote)
Employment Type: Contract

Role Overview

Our organization is executing a large-scale IAM modernization program to migrate applications from legacy authentication systems into Okta. This role is central to a "migration factory" model where engineers are assigned application portfolios for end-to-end onboarding, configuration, testing, and production cutover. The position requires a hands-on Okta implementation engineer focused on execution, with escalation support available from technical teams.

Key Responsibilities

• Own the end-to-end migration of assigned applications from legacy IAM platforms into Okta.
• Configure SAML 2.0 and OIDC/OAuth SSO integrations within the Okta platform.
• Perform application onboarding, comprehensive testing, and production cutover activities, which may include weekend deployments.
• Work directly with application owners, vendors, and internal stakeholders to gather requirements and resolve integration issues.
• Troubleshoot authentication and federation issues using logs, assertions, and configuration analysis.
• Execute migrations based on established documentation and runbooks.
• Validate authentication flows across pre-production and production environments to ensure successful transitions.
• Manage multiple concurrent application migrations while maintaining operational discipline.

Required Qualifications

Experience: This is a mid-to-senior level role for an Okta Implementation Engineer or IAM Engineer with strong SSO migration experience. The candidate must have hands-on experience in structured IAM migration or transformation programs and be capable of independent execution with minimal instruction.

Technical Skills:

• Strong hands-on Okta administration and configuration experience.
• Deep understanding of SAML 2.0 and a working knowledge of OIDC/OAuth.
• Proven experience with SSO application onboarding and identity federation.
• Ability to troubleshoot authentication failures using logs, SSO traces, and other debugging tools.
• Strong communication skills for effective collaboration with application owners and vendors.

Preferred Qualifications

• Familiarity with SiteMinder or other legacy IAM platforms is beneficial.
• Experience with SCIM provisioning and API-based integrations.
• Knowledge of Directory Services such as Active Directory or LDAP.

Compensation & Benefits

The anticipated pay range for this position is $70.00 to $75.00 per hour. Please note that a contract-to-hire position is a temporary assignment that may lead to a permanent role. During the contract period, benefits may include medical, dental, and vision insurance options, a 401k plan, and sick leave, subject to eligibility requirements.

We are an equal opportunity employer and welcome applications from all qualified candidates regardless of race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.

Apex uses a virtual recruiter as part of the application process. Click for more details.

If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation in using our website for a search or application, please contact our Benefits Department at or .

Everforth Apex is a world-class IT services company that serves thousands of clients across the globe. When you join Everforth Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including ClearlyRated's Best of Staffing in Talent Satisfaction in the United States and Great Place to Work in the United Kingdom and Mexico. Everforth Apex uses a virtual recruiter as part of the application process. Click for more details.

Everforth Apex Benefits Overview: Everforth Apex offers a range of supplemental benefits, including medical, dental, vision, life, disability, and other insurance plans that offer an optional layer of financial protection. We offer an ESPP (employee stock purchase program) and a 401K program which allows you to contribute typically within 30 days of starting, with a company match after 12 months of tenure. Everforth Apex also offers a HSA (Health Savings Account on the HDHP plan), a SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions, a corporate discount savings program and other discounts. In terms of professional development, Everforth Apex hosts an on-demand training program, provides access to certification prep and a library of technical and leadership courses/books/seminars once you have 6+ months of tenure, and certification discounts and other perks to associations that include CompTIA and IIBA. Everforth Apex has a dedicated customer service team for our Consultants that can address questions around benefits and other resources, as well as a certified Career Coach. You can access a full list of our benefits, programs, support teams and resources within our 'Welcome Packet' as well, which an Everforth Apex team member can provide.