Okta SSO Engineer

The IAM Engineer will provide engineering and operational support for Okta and OAG environments, supporting application onboarding, testing, automation, platform maintenance, and operational readiness activities.

Key Responsibilities

Okta Cloud

· Administer and support Okta tenant(s) environments

· Configure and maintain:

o Single Sign-On (SSO)

o Multi-Factor Authentication (MFA)

o Adaptive Authentication

o Universal Directory

o Lifecycle Management

· Integrate and Support cloud and enterprise applications with Okta using SAML 2.0, OAuth 2.0, OpenID Connect (OIDC) and WS-Federation

· Create and manage authentication, MFA and authorization policies.

· Troubleshoot user provisioning, federation, and authentication issues.

· Perform testing, validation, and deployment readiness activities for production releases.

Okta Access Gateway (OAG)

· Support and Maintain Okta Access Gateway appliances.

· Integrate legacy on-premises applications with Okta SSO.

· Configure:

o Header-based authentication

o Kerberos/IWA authentication

o Form-based authentication

o Reverse proxy authentication

· Manage SSL/TLS certificates for secure application access.

· Support application onboarding and migration to modern authentication methods.

· Perform OAG upgrades, patching, monitoring, and troubleshooting.

Operations & Governance

· Resolve ServiceNow incidents and service requests

· Assist with access review and audit activities.

· Develop automation using APIs and Okta Workflows.

· Create and maintain runbooks, operational procedures, and technical documentation.

· Collaborate with application, infrastructure, and security teams.

· Support continuous improvement and platform optimization initiatives.

· Support knowledge transfer and training activities.

---

Required Skills (must have)

· Strong experience with Okta Administration and Engineering.

· Hands-on experience with Okta Access Gateway (OAG).

· Experience implementing:

o SAML

o OAuth

o OpenID Connect (OIDC)

o LDAP

o SCIM

o Kerberos

· Knowledge of:

o HTTP/HTTPS

o DNS

o Load Balancers

o Reverse Proxies

o SSL/TLS Certificates

Scripting & Automation

· REST APIs

· Okta Workflows (preferred)

---

Preferred Qualifications (good to have)

· Okta Certified Professional

· Okta Certified Administrator

· Okta Certified Consultant

· Experience with CyberArk, SailPoint, or other IAM tools.

· Experience in enterprise IAM environments