Senior Okta IGA/IAM Engineer

Sonata Software; Bengaluru; On-site; INR 2,500,000 - 4,200,000; Full time

Job summary

Sonata Software in Bengaluru seeks a Senior IAM Engineer – Okta to implement and support the Okta CIS platform. You will configure identity cloud services, build automation with Okta Workflows, and integrate enterprise apps while following security standards and IAM best practices.

You will mentor junior engineers, contribute to design discussions, and deliver deployment packages for Prod through Previews with strong collaboration with architects and project teams.

Qualifications

• Strong hands-on experience with Okta Identity Cloud, Okta Lifecycle Management, and Okta Identity Governance (OIG).
• Extensive experience configuring Okta Workflows and building reusable automation.
• Experience developing custom connectors using Java, Python, Okta SDKs, and REST APIs.
• Strong understanding of Universal Directory, Profile Editor, Group Rules, and Identity Lifecycle Management.
• Experience integrating enterprise applications using SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and SCIM.
• Experience configuring Access Requests, Access Certifications, Resource Catalogs, and governance workflows within Okta Identity Governance.
• Strong knowledge of Org2Org Federation, Identity Providers (IdPs), and federation concepts.
• Experience working with Event Hooks, Inline Hooks, and external REST APIs.
• Familiarity with Infrastructure as Code (Terraform) and CI/CD deployment practices is preferred.
• Strong understanding of authentication, authorization, RBAC, and IAM security best practices.
• Excellent troubleshooting, analytical, and problem-solving skills.
• Strong communication skills and the ability to collaborate effectively with architects, project teams, and business stakeholders.

Responsibilities

• Configure and administer Okta Universal Directory, user profile schema, and profile mappings.
• Implement JML processes using onboarding, CSV imports, and HR integrations.
• Configure authentication policies, sign-on policies, MFA policies, passwords, and security controls.
• Develop and maintain Okta Workflows for lifecycle automation and notifications.
• Build reusable connectors using Java, Python, Okta SDKs & REST APIs where required.
• Configure Okta Identity Governance capabilities: Access Requests, Resource Catalogs, Access Certifications, approvals and reviewer chains.
• Integrate enterprise applications with Okta using SAML, OIDC, OAuth 2.0, and SCIM.
• Configure Org2Org federation, IdPs, and trust relationships.
• Configure Event Hooks, Inline Hooks, and external API integrations.
• Participate in design reviews with Solutions Architect; develop deployment packages and promote between Preview and Production.
• Mentor junior engineers and perform technical reviews to ensure implementation quality.
• Produce technical documentation, implementation guides, runbooks, and knowledge transfer materials.
• Support production deployment, Hypercare activities, and operational handover.

Skills

Okta Identity Cloud

Okta Workflows

Okta Lifecycle Management

Okta Identity Governance (OIG)

SAML 2.0

OAuth 2.0

OIDC

SCIM

Java

Python

REST APIs

Terraform

CI/CD

RBAC

IAM security best practices

Troubleshooting

Communication

Tools

Okta Identity Cloud

Okta Lifecycle Management

Okta Identity Governance (OIG)

Okta Workflows

Java

Python

REST APIs

SAML

OIDC

SCIM

Terraform

CI/CD

Job description

Okta, Okta Developer, Okta Workflows, Okta IGA, Okta IAM

Role Overview

The Senior IAM Engineer – Okta will be responsible for the technical implementation, configuration, and support of the Okta Customer Identity Solutions (CIS) platform. This role will work closely with the Solutions Architect to implement the approved solution design, configure Okta Identity Cloud and Identity Governance capabilities, develop automation using Okta Workflows, integrate enterprise applications, and ensure successful delivery of the identity platform.

The Senior IAM Engineer will also provide technical guidance to junior engineers, participate in design discussions, and ensure implementation aligns with enterprise architecture, security standards, and IAM best practices.

Key Responsibilities

• Configure and administer Okta Universal Directory, user profile schema, and profile mappings.
• Implement Joiner, Mover, and Leaver (JML) processes using manual onboarding, CSV imports, and future HR integrations.
• Configure authentication policies, sign-on policies, MFA policies, password policies, and security controls.
• Develop and maintain Okta Workflows for lifecycle automation, notifications, approvals, and operational processes.
• Build reusable custom connectors using Java, Python, Okta SDKs & Okta Workflows where required.
• Configure Okta Identity Governance (OIG) capabilities, including:
• Access Requests ,Resource Catalogs ,Access Certifications ,Approval & Reviewer Chains
• Integrate enterprise applications with Okta using SAML, OIDC, OAuth 2.0, and SCIM where applicable.
• Configure and manage Org2Org federation, Identity Providers (IdPs), and trust relationships.
• Configure Event Hooks, Inline Hooks, and external API integrations.
• Participate in discovery workshops, technical design discussions, and solution reviews with the Solutions Architect.
• Develop deployment packages and support configuration promotion between Preview and Production environments.
• Execute unit testing, integration testing, support SIT/UAT activities, and resolve implementation issues.
• Mentor junior engineers and perform technical reviews to ensure implementation quality.
• Produce technical documentation, implementation guides, operational runbooks, and knowledge transfer documentation.
• Support production deployment, Hypercare activities, and operational handover.

Required Skills & Experience

• Strong hands-on experience with Okta Identity Cloud, Okta Lifecycle Management, and Okta Identity Governance (OIG).
• Extensive experience configuring Okta Workflows and building reusable automation.
• Experience developing custom connectors using Java, Python, Okta SDKs, and REST APIs.
• Strong understanding of Universal Directory, Profile Editor, Group Rules, and Identity Lifecycle Management.
• Experience integrating enterprise applications using SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and SCIM.
• Experience configuring Access Requests, Access Certifications, Resource Catalogs, and governance workflows within Okta Identity Governance.
• Strong knowledge of Org2Org Federation, Identity Providers (IdPs), and federation concepts.
• Experience working with Event Hooks, Inline Hooks, and external REST APIs.
• Familiarity with Infrastructure as Code (Terraform) and CI/CD deployment practices is preferred.
• Strong understanding of authentication, authorization, RBAC, and IAM security best practices.
• Excellent troubleshooting, analytical, and problem-solving skills.
• Strong communication skills and the ability to collaborate effectively with architects, project teams, and business stakeholders.