Okta & IGA Engineer - Onboarding & BAU Support

U3 INFOTECH PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

U3 INFOTECH PTE. LTD. in Singapore is seeking an experienced Okta & IGA Engineer to manage onboarding of apps, SSO/MFA integrations and identity governance in enterprise IAM environments.

You will implement agentless SSO, configure AD/Kerberos, develop automations using Okta APIs, and provide Tier 2/3 production support while collaborating with security and IT teams throughout the SDLC.

Candidates should have hands-on Okta certification and strong troubleshooting and stakeholder management skills.

Qualifications

• Enterprise IAM experience with hands-on Okta expertise.
• Strong knowledge of Okta SSO, lifecycle management, authorization servers, SAML, OAuth 2.0, and OIDC.
• Experience with IGA/access certification campaigns.
• Hands-on experience with AD, Kerberos, and Network Zones/IdP routing.
• Programming with JavaScript/Node.js, Python, Java, C#, or Go.

Responsibilities

• Onboard SaaS, cloud, and internal applications onto Okta.
• Configure and troubleshoot SSO/MFA using SAML 2.0, OAuth 2.0, and OIDC.
• Implement Agentless SSO and header-based authentication for legacy applications.
• Develop automation and integrations using Okta APIs, Inline Hooks, and lifecycle workflows.
• Configure Active Directory, Service Accounts, SPNs, and Kerberos authentication.
• Execute Access Certification Campaigns using Okta Identity Governance (OIG) or other IGA platforms.
• Provide Tier 2/3 production support , troubleshooting authentication, directory sync, token, and access issues.
• Collaborate with application, infrastructure, security, and business teams throughout the SDLC.

Skills

Okta SSO

IAM

SAML

OAuth/OIDC

Agentless SSO

Kerberos

Active Directory

REST APIs

Automation

JavaScript/Node.js

Job description

Role Overview

We are looking for an experienced Okta & IGA Engineer to manage application onboarding, SSO/MFA integrations, Identity Governance, custom automation, and Tier 2/3 BAU support for enterprise IAM environments.

Key Responsibilities

• Onboard SaaS, cloud, and internal applications onto Okta .
• Configure and troubleshoot SSO/MFA using SAML 2.0, OAuth 2.0, and OIDC.
• Implement Agentless SSO and header-based authentication for legacy applications.
• Develop automation and integrations using Okta APIs, Inline Hooks, and lifecycle workflows .
• Configure Active Directory, Service Accounts, SPNs, and Kerberos authentication.
• Execute Access Certification Campaigns using Okta Identity Governance (OIG) or other IGA platforms.
• Provide Tier 2/3 production support , troubleshooting authentication, directory sync, token, and access issues.
• Collaborate with application, infrastructure, security, and business teams throughout the SDLC.

Requirements

• Enterprise IAM experience , with strong hands-on Okta experience.
• Strong knowledge of Okta SSO, lifecycle management, authorization servers, SAML, OAuth 2.0, and OIDC .
• Experience with IGA/access certification campaigns .
• Hands-on experience with Agentless SSO, Kerberos, AD, and Network Zones/IdP routing .
• Programming experience in JavaScript/Node.js, Python, Java, C#, or Go .
• Experience with REST APIs, JSON, token validation, and automation .
• Strong troubleshooting and stakeholder management skills.
• Okta certification (Professional, Administrator, Consultant, or Developer) preferred/required.