Senior Engineer, Workplace Technology (Okta)

0026 Checkout Technology Ltd; Greater London; On-site; GBP 60,000 - 80,000; Full time

Job summary

0026 Checkout Technology Ltd is looking for a highly motivated IAM Engineer to join its IT Engineering team. This role involves designing, implementing, and maintaining IAM systems, ensuring the security and integrity of organizational data by managing user identities and access privileges.

You will work closely with cross-functional teams to translate IAM requirements into technical designs and collaborate with InfoSec teams on compliance audits. The ideal candidate will have strong Okta experience and a passion for continuous problem-solving.

Qualifications

• Hands-on experience with Okta, including Okta Identity Engine and Okta Workflows.
• Strong background in integrating identity applications using SAML, OIDC/OAuth, and SCIM protocols.
• Proven expertise in managing platform identity and access controls across cloud environments.
• Proficiency in scripting and automation with Node.js, Python, or PowerShell.

Responsibilities

• Administer Checkout’s Identity platform and collaborate with cross-functional teams.
• Implement automated workflows using Okta workflows for user provisioning.
• Conduct access reviews to ensure compliance with security principles.
• Monitor IAM systems for vulnerabilities and document IAM practices.

Skills

Okta

SAML

OIDC/OAuth

SCIM

Node.js

Python

PowerShell

AWS IAM

GCP IAM

Tools

Terraform

CI/CD pipelines

Job description

Job Description

We are looking for a highly motivated IAM Engineer to join the IT Engineering team and provide a world class end user technology experience. You will be responsible for designing, implementing, and maintaining our organization's IAM systems and processes ensuring the security and integrity of our systems and data by managing user identities, access privileges, and enforcing authentication and authorization mechanisms. Your role will be pivotal in delivering the team's mission to empower Checkout employees to deliver exceptional results efficiently and effectively any time, anywhere.

Responsibilities

• Administration of Checkout’s Identity platform, including Okta and our joiner, mover leaver process
• Collaborate with cross‑functional teams to gather IAM requirements and translate them into technical designs.
• Ongoing integration of applications to use SSO with Okta, including liaising with application owners to gather requirements and develop integration approaches.
• Develop and maintain user account provisioning and deprovisioning processes.
• Implement automated workflows and approval processes using Okta workflows for user onboarding, role changes, and offboarding.
• Conduct periodic access reviews to ensure adherence to least privilege and separation of duties principles.
• Manage user identities, roles, groups, and access policies across various systems and platforms.
• Establish and enforce access control policies, including role‑based access control (RBAC) and attribute‑based access control (ABAC).
• Implement and manage device trust and assurance rules within Okta Identity Engine.
• Monitor IAM systems and processes for security vulnerabilities, potential threats, and compliance issues.
• Develop and maintain documentation, including policies, procedures, and guidelines related to IAM practices.
• Work closely with our InfoSec team to ensure seamless execution of IAM‑related tasks and controls for audits such as PCI DSS, ISO 27001, and SOC2 TypeII.
• Collaborate with the Security Operations team to respond to security incidents and conduct forensic investigations, if required.
• Collaborate with internal stakeholders, including IT teams, application owners, and business units, to understand their IAM needs.
• Provide support and troubleshooting assistance for IAM‑related issues and incidents.
• Train end users on IAM practices, tools, and self‑service capabilities.

Qualifications

• Hands‑on experience with Okta, including Okta Identity Engine, Okta Org‑to‑Org, Okta Workflows, and Okta Device Access.
• Strong background in integrating identity applications using protocols such as SAML, OIDC/OAuth, and SCIM.
• Proven expertise in managing platform identity and access controls across cloud environments, including AWS IAM, GCP IAM, and other major platforms.
• Proficiency in scripting and automation using languages like Node.js, Python, or PowerShell, leveraging config‑as‑code and policy‑as‑code principles (e.g., Terraform, CI/CD pipelines) to operate consistently at scale.
• Excellent problem‑solving and troubleshooting skills, with the ability to resolve complex IAM‑related issues efficiently.
• A proactive mindset with a passion for continuous learning and staying ahead of evolving trends, tools, and technologies.
• Strong communication and collaboration skills, with the ability to work effectively across cross‑functional teams.
• Experience operating within regulated environments (e.g., Finance, Banking, Insurance), ensuring compliance with standards and frameworks.