IAM Federation Services (Okta) Engineer (Hybrid)

Allergan; North Chicago (IL); On-site; USD 120,000 - 165,000; Full time

Job summary

AbbVie is seeking an IAM Federation Services Engineer to design, implement, and maintain federation identity and access management for a global workforce. You will work with Microsoft Entra ID, Okta, and PingFederate to deliver secure authentication and SSO across enterprise and cloud systems.

Responsibilities include developing custom authentication experiences, configuring MFA, troubleshooting provisioning issues, and collaborating with global teams to enhance federation capabilities.

Qualifications

• Experience designing and implementing federation identity and access management solutions.
• Proficiency with Okta, Entra ID, and PingFederate in large-scale environments.
• Strong scripting (PowerShell) for automation and management of IAM systems.
• Experience with CIAM workflows including registration flows and login widgets.
• Excellent problem-solving and communication skills.

Responsibilities

• Design and implement federation IAM solutions aligned with business needs.
• Integrate federation technologies with AD, HR systems, and cloud apps using SAML/OIDC/OAuth.
• Develop and maintain custom authentication experiences via Okta APIs and widgets.
• Configure and support MFA technologies (PingID, Okta Verify, MS Authenticator, FIDO2).
• Troubleshoot federation authentication/authorization issues and log analysis.
• Monitor and optimize federation infrastructure for scalability and performance.
• Provide guidance to admins and end-users on federation topics.
• Collaborate with cross-functional teams and vendors to enhance capabilities.
• Document configurations, processes, and stay updated on industry trends.

Skills

Federation engineering

Identity & access management

Okta

Entra ID

PingFederate

CIAM workflows

PowerShell

Education

Bachelor’s degree with 5+ years experience

Master’s degree with 4+ years experience

Tools

Okta Identity Engine (OIE)

SAML 2.0 / OIDC / OAuth 2.0

Job description

Company Description

About AbbVie

AbbVie's mission is to discover and deliver innovative medicines and solutions that solve serious health issues today and address the medical challenges of tomorrow. We strive to have a remarkable impact on people's lives across several key therapeutic areas including immunology, oncology and neuroscience - and products and services in our Allergan Aesthetics portfolio. For more information about AbbVie, please visit us at www.abbvie.com. Follow @abbvie on LinkedIn, Facebook, Instagram, X and YouTube.

Job Description

Join AbbVie’s Information Security & Risk Management (ISRM) team as an IAM Federation Services Engineer, where we empower our partners to succeed by delivering the knowledge, tools, and support needed to leverage data and technology securely and effectively. The ideal candidate will have deep expertise in Microsoft Entra ID (formerly Azure AD), Okta, and Ping Federate to design, implement, and manage Directory and Authentication solutions for our global workforce of 80,000 users and customer identities.

In this role, you’ll be responsible for:

• Designing and implementing federation identity and access management solutions aligned with business requirements.
• Integrating federation technologies with enterprise and cloud systems (e.g., Active Directory, HR systems, cloud applications) using standards such as SAML 2.0, OIDC, and OAuth 2.0.
• Developing and maintaining custom authentication experiences leveraging Okta APIs, SDKs, and widget-based login flows.
• Configuring and supporting various MFA technologies, such as PingID, Okta Verify, MS Authenticator, FIDO2, biometric, and OTP/push authentication.
• Troubleshooting and resolving federation authentication and authorization issues, including analyzing logs and diagnosing user provisioning challenges.
• Monitoring, optimizing, and ensuring the scalability and performance of federation infrastructure.
• Providing technical guidance and support to administrators and end-users on federation-related topics.
• Collaborating with cross-functional teams, vendors, and external partners to leverage integration opportunities and enhance federation capabilities.
• Documenting federation configurations, processes, and procedures; staying updated on industry trends and recommending improvements for ongoing enhancement.

Experiences that make you a strong candidate for this role:

• Proven experience as a Federation Engineer or in a similar role, with a strong understanding of identity and access management principles, using Okta, Entra ID, and PingFederate.
• Hands-on experience with Okta Identity Engine (OIE) for CIAM workflows (registration flows, self-service, and B2C/B2B identity patterns, Sign-in Widget).
• Solid knowledge of federation platform features and functionalities, including user lifecycle management, SSO, and MFA.
• Strong troubleshooting and problem-solving skills, with the ability to analyze and resolve complex federation-related issues.
• Excellent communication and interpersonal skills, with the ability to collaborate effectively with cross-functional teams.
• Strong attention to detail and ability to prioritize tasks in a fast-paced environment.

Qualifications

• Bachelor’s degree with 5 years of experience OR Masters with 4 years of experience.
• Minimum 4 years of experience with Okta, Ping Federate.
• Advancedproficiencyin PowerShell scripting for automation and management of identity systems.
• Excellent problem-solving skills and ability to work in a fast-paced, global environment.

Preferred:

• Certifications in relevant federation technologies (such as Okta Certified Administrator, Ping Federate / PingOne Certified, or Microsoft Entra ID) are a plus.
• Experience supporting large-scale environments (10,000+ users; 80,000+ users preferred).
• Knowledge of security best practices and compliance frameworks (e.g., NIST, ISO 27001)..

Additional Information

Applicable only to applicants applying to a position in any location with pay disclosure requirements under state or local law:

• The compensation range described below is the range of possible base pay compensation that the Companybelieves ingood faith it will pay for this role at thetimeofthis posting based on the job grade for this position.Individualcompensation paid within this range will depend on many factors including geographiclocation,andwemayultimatelypaymore or less than the posted range. This range may bemodifiedin thefuture.
• We offer a comprehensive package of benefits including paid time off (vacation, holidays, sick),medical/dental/visioninsurance and 401(k) to eligibleemployees.
• This job is eligible toparticipatein our short-term incentiveprograms.

Note: No amount of payis considered to bewages or compensation until such amount is earned, vested, anddeterminable.Theamountandavailabilityof anybonus,commission, incentive, benefits, or any other form ofcompensation and benefitsthat are allocable to a particular employeeremainsin the Company'ssoleandabsolutediscretion unless and until paid andmay bemodifiedat the Company’s sole and absolute discretion, consistent withapplicable law.

AbbVie is an equal opportunity employer and is committed to operating with integrity, driving innovation, transforming lives and serving our community. Equal Opportunity Employer/Veterans/Disabled.

US & Puerto Rico only - to learn more, visit https://www.abbvie.com/join-us/equal-employment-opportunity-employer.html

US & Puerto Rico applicants seeking a reasonable accommodation, click here to learn more:

https://www.abbvie.com/join-us/reasonable-accommodations.html