Cloud Engineer (Okta), Malvern, PA, US

Intellibee; Malvern (AR); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

Long-Term Stability

Comprehensive Health Coverage

Future Planning

GC Assistance

Job summary

IntelliBee in the United States is seeking a senior Identity and Access Management engineer to design, implement, and maintain Okta-based identity solutions across platforms.

You will lead authentication strategy, integrate SAML, OAuth, OIDC, MFA, and device-based security, and partner with cybersecurity teams to strengthen controls while ensuring a seamless user experience. This on-site role offers growth within a stable, innovation-driven team at IntelliBee.

Qualifications

• 5–10 years in Identity and Access Management or related security field.
• Hands-on with Okta, Entra ID, Ping Identity, or Auth0.
• Experience with SAML 2.0, OAuth 2.0, OIDC, SCIM, MFA and federation.
• Experience onboarding/integrating enterprise apps and troubleshooting flows.
• Strong analytical, communication and cross-functional collaboration skills.

Responsibilities

• Design, engineer, configure, and maintain Okta identity solutions.
• Develop scalable SSO, MFA, and passwordless authentication capabilities.
• Integrate applications using SAML, OAuth, OIDC, SCIM and REST APIs.
• Define standards and secure baselines for identity services.
• Engineer device-based authentication and risk-aware controls.
• Provide documentation, tests, and operational runbooks; support releases.

Skills

Okta Workforce Identity

Identity & Access Management

SAML 2.0

OAuth 2.0

OIDC

MFA

Terraform

CI/CD

GitHub

Splunk

Elastic

Tools

Terraform

GitHub

CI/CD pipelines

Splunk

Elastic

Job description

• Design, engineer, configure, and maintain Okta Workforce Identity solutions and platform capabilities.
• Develop scalable SSO, federation, MFA, password less authentication, authorization, and identity lifecycle solutions.
• Integrate enterprise applications using SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), SCIM, REST APIs, and federation technologies.
• Define reusable engineering patterns, technical standards, and secure configuration baselines for identity services.
• Engineer Okta FastPass, Device Trust, Device Bound SSO, FIDO2, and device-based authentication capabilities.
• Design secure authentication experiences across desktop, mobile, remote-access and shared-device use cases.
• Implement privileged-access, step-up authentication, and authentication assurance controls while improving the user experience.
• Automation, Integration & Delivery
• Support application onboarding, identity lifecycle integration, platform enhancements, testing, rollout planning, production releases, and post-deployment validation.
• Troubleshoot complex authentication, federation, provisioning, device-context, and application-integration issues.
• Create implementation documentation, technical designs, test plans, operational procedures, and knowledge articles.
• Reliability, Operations & Lifecycle Management
• Ensure platform availability, resiliency, security, performance, and operational readiness.
• Maintain monitoring, alerting, dashboards, log analysis, and observability using tools such as Splunk or Elastic.
• Provide production support; participate in incident response, problem management, root cause analysis, and continuous improvement.
• Plan and execute platform upgrades, feature adoption, change management, and production validation.
• Conduct disaster recovery, failover, contingency, and resiliency testing; maintain runbooks and support documentation.
• Security & Compliance Engineering
• Remediate vulnerabilities, security findings, configuration risks, and identity-related control gaps.
• Partner with cybersecurity teams on identity threat mitigation, privileged-access controls, and security-hardening initiatives.

Qualifications:

Required Qualifications:

• 5–10 years of experience in Identity and Access Management, identity platform engineering, security engineering, cloud security, or a related discipline.
• Hands-on experience with an enterprise identity provider such as Okta, Microsoft Entra ID, Ping Identity, or Auth0.
• Experience with endpoint and mobile device management platforms such as Microsoft Intune or Omnissa Workspace ONE.
• Demonstrated experience with SAML 2.0, OAuth 2.0, OIDC, SCIM, MFA, federation, and modern authentication technologies.
• Experience onboarding and integrating enterprise applications and troubleshooting authentication and provisioning flows.
• Experience supporting production services, releases, incidents, change management, and technical documentation.
• Robust analytical, troubleshooting, communication, and cross-functional collaboration skills.

Preferred Qualifications:

• Hands-on experience with Okta Workforce Identity Cloud, Okta FastPass, Okta Workflows, Universal Directory, and Lifecycle Management.
• Knowledge of passwordless authentication, FIDO2/WebAuthn, device assurance, Device Trust, and Device Bound SSO.
• Experience with AWS, Microsoft Azure, or Google Cloud Platform.
• Experience with automation, Infrastructure as Code, Terraform, GitHub, and CI/CD pipelines.
• Experience with SIEM and observability platforms such as Splunk or Elastic.
• Relevant IAM, Okta, security, or cloud certifications.
• Core Technical Skills
• Okta Workforce Identity Cloud and enterprise IdPs
• Identity lifecycle management and provisioning
• Terraform, GitHub, CI/CD and automation
• Splunk or Elastic monitoring and log analysis
• Production support, incident response and change management

Benefits at IntelliBee

• Long-Term Stability: Join us on a multi-year opportunities with room to grow.
• Comprehensive Health Coverage: Access quality healthcare benefits to keep you and your family well.
• Future Planning: Enroll in our 401(k) program and invest in your financial security.
• GC Assistance: We support immediate Green Card processing, if required.