kjohn@samrusystems.com

Compensation

Full Description

Job Description Summary: Senior Okta & IAM Systems Engineer Primary Focus: Okta Operations, M&A Identity Tenant Migration, and Legacy IAM Application Modernization Key Core Responsibilities Covered Operations & Okta Platform Support: Manage day-to-day operations, health monitoring, and administration of Okta (OIE / Identity Engine, Universal Directory, Adaptive MFA, Lifecycle Management, Workflows, Okta Access Gateway). Tier 3 support for identity escalations, authentication failures, API token issues, and provisioning sync errors. Governance, RBAC/ABAC policy enforcement, and operational scripting via API, PowerShell, and Python. M&A / Subsidiary Identity Migration: Lead the end-to-end technical consolidation of identity infrastructures, user accounts, groups, and directory services from a recently acquired subsidiary into the parent company’s enterprise Okta tenant. Normalize user schemas, reconcile attribute conflicts, establish co-existence strategies, and execute seamless cutover waves. Legacy IAM Application Onboarding & Modernization: Assess and migrate enterprise applications off legacy IAM platforms (e.g., ADFS, Ping Federate, CA SiteMinder, Oracle IAM, standalone LDAP/Kerberos) to Okta. Implement standard modern federation and provisioning protocols (SAML 2.0, OpenID Connect / OIDC, OAuth 2.0, SCIM). Utilize Okta Access Gateway (OAG) for legacy on-premises web apps requiring header or cookie-based authentication. Required Qualifications & Experience Experience: 8+ years in Enterprise IAM / Security, with 5+ years specifically in Okta administration and engineering. Core Competencies: Okta OIE, Universal Directory, Tenant-to-Tenant Migrations, SAML 2.0/OIDC/SCIM, Active Directory consolidation. Certifications (Preferred): Okta Certified Administrator, Consultant, or Professional.