Staff Identity Security Engineer – IGA, PAM & ISPM

Okta; Ashington; Remote; GBP 110,000 - 150,000; Full time

Benefits offered by this job

Work from home opportunities

Health + Wellness

Financial Benefits

Pay + Incentives

Time Off

Everyday Living

Resources

Job summary

Okta is seeking a Staff Identity Security Engineer to own end-to-end Identity Governance (IGA), Privileged Access Management (PAM), and Identity Security Posture Management (ISPM) across Okta technologies. You will drive architecture decisions, mentor engineers, and raise the bar for security posture enterprise-wide on complex joiner/mover/leaver workflows.

You will design birthright provisioning, RBAC strategies, real-time Workday integrations, and privileged access controls with Just-In-Time

Qualifications

• PAM/OPA tooling experience with Zero Standing Privilege and Just-In-Time access models.
• Solid grounding in identity standards (SAML, OIDC, OAuth 2.0, SCIM).
• Birthright provisioning and RBAC architectures in production.
• ISPM tooling experience with EDR integrations.
• Autonomy with executive communication and stakeholder updates.
• 4+ years in enterprise IGA, PAM/ISPM environments.
• SOX/compliance experience and audit awareness.
• Lifecycle ownership from design through production rollout.
• Must be eligible on U.S. soil and a U.S. person.

Responsibilities

• Own OIG architecture end-to-end and design access workflows.
• Lead birthright, RBAC strategy and joiner/mover/leaver processes.
• Drive Workday integration architecture and real-time vs reconciliation strategies.
• Design and harden mover/leaver automation and decommissioning.
• Lead OPA, ISPM, and ZSP initiatives and tiered privilege models.
• Own PAM and ISPM telemetry and KPI tracking.
• Build and maintain Okta Workflows automation for IGA and PAM.
• Mentor engineers, review designs, and communicate risks to leadership.

Skills

PAM/OPA tooling

Zero Standing Privilege

Just-In-Time access

Identity standards

RBAC design

Birthright provisioning

ISPM tooling

Executive communication

Lifecycle ownership

SOX/compliance

ServiceNow/JIRA

REST APIs/JSON

Workday-to-IdP patterns

Tools

ServiceNow

JIRA

Okta ISPM

REST APIs

Workday integration

Job description

Okta is seeking a Staff Identity Security Engineer to own end-to-end Identity Governance (IGA), Privileged Access Management (PAM), and Identity Security Posture Management (ISPM) across Okta technologies. You will drive architecture decisions, mentor engineers, and raise the bar for security posture enterprise-wide on complex joiner/mover/leaver workflows.

You will design birthright provisioning, RBAC strategies, real-time Workday integrations, and privileged access controls with Just-In-Time