Okta Engineer

Hello Everyone,

I am hiring for the role mentioned below.

Job Title: OKta Engineer

Work Location: Malvern, PA

Work Arrangement: Onsite

Application Deadline: Applications are accepted on an ongoing basis until the position is filled.

Skills

Identity and Access Management, identity platform engineering, security engineering, cloud security, or a related discipline

Experience with endpoint and mobile device management platforms such as Microsoft Intune or Omnissa Workspace ONE.

SAML, OAuth, OIDC, SCIM, federation

MFA, FIDO2, password less, device authentication

Okta Workforce Identity Cloud and enterprise IdPs

Identity lifecycle management and provisioning

REST APIs, Python, PowerShell, JavaScript

Terraform, GitHub, CI/CD and automation

Splunk or Elastic monitoring and log analysis

Production support, incident response and change management

Responsibilities

Key Responsibilities

· Platform Architecture & Engineering

· Design, engineer, configure, and maintain Okta Workforce Identity solutions and platform capabilities.

· Develop scalable SSO, federation, MFA, passwordless authentication, authorization, and identity lifecycle solutions.

· Integrate enterprise applications using SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), SCIM, REST APIs, and federation technologies.

· Define reusable engineering patterns, technical standards, and secure configuration baselines for identity services.

· Passwordless, User & Device Authentication

· Engineer Okta FastPass, Device Trust, Device Bound SSO, FIDO2, and device-based authentication capabilities.

· Design secure authentication experiences across desktop, mobile, remote-access and shared-device use cases.

· Implement privileged-access, step-up authentication, and authentication assurance controls while improving the user experience.

· Automation, Integration & Delivery

· Develop automation and tooling using Okta APIs, Workflows, Python, PowerShell, JavaScript, Terraform, GitHub, and CI/CD practices.

· Support application onboarding, identity lifecycle integration, platform enhancements, testing, rollout planning, production releases, and post-deployment validation.

· Troubleshoot complex authentication, federation, provisioning, device-context, and application-integration issues.

· Create implementation documentation, technical designs, test plans, operational procedures, and knowledge articles.

· Reliability, Operations & Lifecycle Management

· Ensure platform availability, resiliency, security, performance, and operational readiness.

· Maintain monitoring, alerting, dashboards, log analysis, and observability using tools such as Splunk or Elastic.

· Provide production support; participate in incident response, problem management, root cause analysis, and continuous improvement.

· Plan and execute platform upgrades, feature adoption, change management, and production validation.

· Conduct disaster recovery, failover, contingency, and resiliency testing; maintain runbooks and support documentation.

· Security & Compliance Engineering

· Remediate vulnerabilities, security findings, configuration risks, and identity-related control gaps.

· Partner with cybersecurity teams on identity threat mitigation, privileged-access controls, and security-hardening initiatives.

Required Qualifications

· 5–10 years of experience in Identity and Access Management, identity platform engineering, security engineering, cloud security, or a related discipline.

· Hands-on experience with an enterprise identity provider such as Okta, Microsoft Entra ID, Ping Identity, or Auth0.

· Experience with endpoint and mobile device management platforms such as Microsoft Intune or Omnissa Workspace ONE.

· Demonstrated experience with SAML 2.0, OAuth 2.0, OIDC, SCIM, MFA, federation, and modern authentication technologies.

· Experience onboarding and integrating enterprise applications and troubleshooting authentication and provisioning flows.

· Experience with REST APIs and scripting or development using Python, PowerShell, or JavaScript.

· Experience supporting production services, releases, incidents, change management, and technical documentation.

· Strong analytical, troubleshooting, communication, and cross-functional collaboration skills.

Preferred Qualifications

· Hands-on experience with Okta Workforce Identity Cloud, Okta FastPass, Okta Workflows, Universal Directory, and Lifecycle Management.

· Knowledge of passwordless authentication, FIDO2/WebAuthn, device assurance, Device Trust, and Device Bound SSO.

· Experience with AWS, Microsoft Azure, or Google Cloud Platform.

· Experience with automation, Infrastructure as Code, Terraform, GitHub, and CI/CD pipelines.

· Experience with SIEM and observability platforms such as Splunk or Elastic.

· Relevant IAM, Okta, security, or cloud certifications.

Core Technical Skills

· Okta Workforce Identity Cloud and enterprise IdPs • SAML, OAuth, OIDC, SCIM, federation

· MFA, FIDO2, passwordless, device authentication • Identity lifecycle management and provisioning

· REST APIs, Python, PowerShell, JavaScript • Terraform, GitHub, CI/CD and automation

· Splunk or Elastic monitoring and log analysis • Production support, incident response and change management

NLB Services is an

Equal Opportunity Employer. All qualified applicants will receive consideration

without regard to any legally protected characteristic, including disability

and protected veteran status. For recruitment accommodations, contact your

recruiter or [email protected].

Reasonable Accommodation

NLB Services provides reasonable accommodations during the recruitment process as required by law. Applicants requiring an accommodation due to a disability, pregnancy-related limitation, or sincerely held religious belief, practice or observance may contact their recruiter or email [email protected].

Benefits

Based on employment status and assignment, eligible employees may receive benefits, such as Medical, Dental and Vision Insurance, Health Insurance, Disability Insurance, etc. Eligibility and benefit terms vary by assignment.

Other Important Terms

Applicants must be legally authorized to work in the United States.

Any employment offer may be contingent upon job-related screening, employment eligibility verification and other requirements permitted by applicable law.

Following a conditional offer of employment, candidates may be required to complete job-related background screening, which may include criminal history checks and/or drug testing, as applicable and permitted by federal, state, and local law.