Okta Engineering Lead

Job#: 3032960

Job Description:

The Identity & Access Management (IAM) Lead reports to the Access Management Engineering Director in a hands-on role focused on the security architecture in the IAM space supporting cloud and on-prem services. The architect works directly with Lead Development, Engineering and Operational resources through collaboration and mentoring to shape the cloud IAM capabilities for the Firm.

The IAM SSO Solution Architect or Sr SSO Engineer is a technical position which will support the development of security strategies and architecture vision as it relates to the Firm's access management initiatives, specifically setting the direction for IAM as it relates to on prem and cloud. The IAM SSO Solution Architect or Sr SSO Engineer will work with other Architects and Service Owners to provide a consensus-based enterprise solution that is scalable, adaptable and synchronized with the ever changing business needs.

As AI driven capabilities are integrated into the identity program, this role will lead the technical enablement of Okta's AI and automation features including adaptive authentication, anomalous behavior detection, and event driven workflows working in close coordination with the IGA and PAM teams to support a cohesive intelligence augmented identity stack.

Key Responsibilities

Subject-matter expertise across all IAM topics as it relates to both cloud and on-premises enterprise technology, and the relationship between the architectures.

Drive the adoption of Authentication and Authorization reference architectures for existing, new and emerging IAM technologies.

Drive the adoption of creative solutions to address complex, global IAM problems.

Participate in Identity and Access Management enterprise governance processes and drive IAM standards adoption.

Develop effective architecture solutions that not only satisfy immediate project requirements but also deliver a coherent, reusable, reliable and phased architecture to help the business grow and change while aligning to strategic vision.

Create, maintain and align the Firm's Information Security policies and standards with industry best practices and business needs in the adoption of cloud services and technologies.

Represent Information Security on organizational project teams and ensure adherence to existing security policies and standards.

Manage the successful technical delivery of Information Security projects and services for our customers by working directly with key business stakeholders, executives and project teams. Security architects are often the technical lead on initiatives and as such must drive the vision and alignment of the solution delivery. This is not a project manager role.

Review and management of technical security roadmaps related to cloud security and IAM within a cloud security context.

Deliver technical security configuration architecture expertise in implementing cross-organizational information sharing.

Develop solutions and recommendations for issues caused by process challenges, emerging threats and technology changes.

Analytical/Decision Making Responsibilities:

The individual in this role must be able to understand and interpret identity and access management strategies and direction. Further, the person must be able to bring together key tenets of Information Security to the IAM cloud strategies and develop technical security solutions that properly align. The Architect will contribute to the overall effort of the IAM direction of the Firm.

Knowledge, Skills, and Experience Requirements:

The individual in this role must be well educated in general aspects of Information Security, namely:

Experience architecting IAM solutions within Microsoft Azure , Amazon Web Services (AWS) and, preferably, other cloud providers.

Intimately familiar with IAM related protocols such as SAML, SPML, XACML, SCIM, OpenID and OAuth.

Experience working with cloud security and governance tools, cloud access security brokers (CASBs), and server virtualization technologies.

Federation concepts and technologies particularly with solutions from ADFS and Ping Identity.

In-depth experience with Microsoft Azure, particularly Azure AD and architecture designs connecting Azure to enterprise infrastructure.

Strong experience with Directories, SSO, Federation, Delegated administration, API gateways, SOA services.

Strong understanding of cloud computing architecture, technical design and implementations, including Infrastructure as a Service (IaaS), Platform as a Service (PaaS) and Software as a Service (SaaS) delivery models.

Excellent customer service and communication (oral / written) skills required.

Strong critical thinking and analytical skills and ability to think "out of the box" required.

Must be able to work independently or with a team, under minimum supervision.

Consults to key customers and senior management on project design and development scope.

Some knowledge of scripting languages (vbscript, powershell, perl, javascript, etc.).

Assists customer organizations with planning and implementing complex architecture solutions.

Understanding of AI/ML-driven identity controls and adaptive access patterns

Desired skills include:

Expert level experience in Cloud Authentication and Access management Services.

Expert level experience in cloud solution development with Azure, AWS, Google, or other relevant cloud solution architectures.

Good understanding of Multi-Factor authentication and Privileged Access Management

2-3 years of software development experience is desirable.

Must have working knowledge and understanding of networking technologies such as LAN, WAN, TCP/IP, load balancers, firewalls etc.

Education:

Bachelor's or Master's degree in Information Assurance, Computer Science, Information Systems or related field of study.

Experience:

8+ years of practical experience in the field of IT is required. 5+ years of direct Information Security experience.

Certification Preferences:

A security industry certification is preferred including but not limited to CISSP, SSCP, CISM, SANS GSEC, ECSA, ECSP, and Security+.

Everforth Apex is a world-class IT services company that serves thousands of clients across the globe. When you join Everforth Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including ClearlyRated's Best of Staffing in Talent Satisfaction in the United States and Great Place to Work in the United Kingdom and Mexico. Everforth Apex uses a virtual recruiter as part of the application process. Click for more details.

Everforth Apex Benefits Overview: Everforth Apex offers a range of supplemental benefits, including medical, dental, vision, life, disability, and other insurance plans that offer an optional layer of financial protection. We offer an ESPP (employee stock purchase program) and a 401K program which allows you to contribute typically within 30 days of starting, with a company match after 12 months of tenure. Everforth Apex also offers a HSA (Health Savings Account on the HDHP plan), a SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions, a corporate discount savings program and other discounts. In terms of professional development, Everforth Apex hosts an on-demand training program, provides access to certification prep and a library of technical and leadership courses/books/seminars once you have 6+ months of tenure, and certification discounts and other perks to associations that include CompTIA and IIBA. Everforth Apex has a dedicated customer service team for our Consultants that can address questions around benefits and other resources, as well as a certified Career Coach. You can access a full list of our benefits, programs, support teams and resources within our 'Welcome Packet' as well, which an Everforth Apex team member can provide.