IAM Architect

Charter Global; Herndon (VA); On-site; USD 140,000 - 190,000; Full time

Job summary

Charter Global is seeking an experienced Okta SME / Architect to lead identity architecture and lifecycle management within a large enterprise software environment. You will own Okta, Microsoft Entra ID, and Active Directory integrations to enable secure, scalable IAM solutions aligned with Zero Trust.

The role requires deep expertise in Okta, identity governance, federation technologies, automation, and IAM best practices. Onsite presence in Herndon, VA three days per week is required.

Qualifications

• 7+ years of experience in System Administration or IAM Engineering roles.
• 5+ years of focused Identity & Access Management experience.
• Deep expertise with Okta (Universal Directory, Lifecycle Management, Workflows, MFA, Policies).
• Experience with SSO, SAML, OIDC and federation technologies.
• Strong Active Directory background.
• Advanced PowerShell scripting and automation experience.
• Ability to work onsite in Herndon, VA three days per week.

Responsibilities

• Serve as the SME and technical lead for Okta, Microsoft Entra ID, and Active Directory.
• Design, implement, and maintain enterprise IAM architecture and integrations.
• Lead application onboarding efforts, access governance initiatives, and lifecycle management processes.
• Develop PowerShell automation for provisioning, deprovisioning, entitlement management, auditing, and compliance reporting.
• Architect and manage Okta integrations, MFA policies, SCIM provisioning, and access request workflows.
• Create and maintain IAM documentation, architecture diagrams, standards, and operating procedures.
• Partner with Cybersecurity, Cloud Operations, and Infrastructure teams to ensure secure identity management practices.
• Support incident response, troubleshooting, root-cause analysis, and service reliability initiatives.
• Drive scalable IAM solutions that support regulatory and compliance requirements.

Skills

Okta expertise

IAM engineering

Active Directory

PowerShell scripting

SSO / SAML / OIDC

Identity governance

Onsite in Herndon

Job description

Duration: 12 months+

Citizenship Requirement: Must be a U.S. Citizen

Employment Type: Contract (Potential Contract-to-Hire)

Position Overview:

We are seeking an experienced Okta SME / Architect to lead identity architecture and identity lifecycle management initiatives within a large enterprise software environment. This individual will serve as the subject matter expert for Okta, Microsoft Entra ID, and Active Directory, driving secure, scalable, and automated identity and access management (IAM) solutions aligned with Zero Trust and compliance requirements.

The ideal candidate will possess deep expertise in Okta architecture, identity governance, federation technologies, automation, and IAM best practices.

Required Skills & Experience:

• 7+ years of experience in System Administration or IAM Engineering roles
• 5+ years of focused Identity & Access Management experience
• Deep expertise with:
• Okta (Universal Directory, Lifecycle Management, Workflows, MFA, Policies)
• SSO, SAML, OIDC, and federation technologies
• Active Directory
• Advanced PowerShell scripting and automation experience
• Strong understanding of identity governance, access lifecycle management, and security best practices
• Ability to work onsite in Herndon, VA three days per week.

Key Responsibilities:

• Serve as the SME and technical lead for Okta, Microsoft Entra ID, and Active Directory.
• Design, implement, and maintain enterprise IAM architecture and integrations.
• Lead application onboarding efforts, access governance initiatives, and lifecycle management processes.
• Develop PowerShell automation for provisioning, deprovisioning, entitlement management, auditing, and compliance reporting.
• Architect and manage Okta integrations, MFA policies, SCIM provisioning, and access request workflows.
• Create and maintain IAM documentation, architecture diagrams, standards, and operating procedures.
• Partner with Cybersecurity, Cloud Operations, and Infrastructure teams to ensure secure identity management practices.
• Support incident response, troubleshooting, root-cause analysis, and service reliability initiatives.
• Drive scalable IAM solutions that support regulatory and compliance requirements.