Identity & Access Engineer: Okta & Duo Migration Expert

Yoh Services LLC; Georgia; Hybrid; USD 83,000 - 110,000; Full time

Benefits offered by this job

Medical & Dental

Health Savings Account (HSA)

Life & Disability Insurance

401K Plan

Job summary

Yoh is seeking an Identity & Access Engineer for a 6- to 12-month contract in Peachtree Corners, GA (Hybrid). The role focuses on migrating Duo to Okta, enterprise identity platforms, and MFA/SSO configurations across AD and Entra ID.

You will design and implement authentication migrations, automate provisioning with PowerShell and REST APIs, and coordinate integrations with security and application teams. This is a contract role with potential for hire.

Qualifications

• 5+ years of IAM engineering in enterprise environments.
• Hands-on experience implementing, configuring, and troubleshooting Okta and Duo.
• Strong knowledge of Active Directory, Microsoft Entra ID, LDAP, and hybrid identity architectures.
• Demonstrated experience implementing SSO and MFA integrations using SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC).
• Experience migrating applications between identity providers or authentication platforms, including testing, validation, and cutover planning.
• Experience with virtual directory services, LDAP proxying, identity mapping, and authentication across multiple directory environments.
• Experience implementing automated identity provisioning and deprovisioning, including HR-driven lifecycle processes.
• Knowledge of SCIM, directory synchronization, and identity provisioning technologies.
• Strong PowerShell scripting skills and experience using REST APIs to automate identity administration and integrations.
• Ability to independently deliver complex identity engineering projects from requirements through implementation and operational handoff.
• Strong troubleshooting skills across authentication flows, federation, directory services, and application access.
• Experience collaborating with security teams, application owners, infrastructure engineers, and external technology partners.
• Excellent technical documentation, communication, and knowledge transfer skills.
• Okta certifications, such as Okta Certified Administrator or Okta Certified Consultant.
• Experience integrating identity platforms with HR systems, such as Workday.
• Experience with Radiant Logic or comparable virtual directory technologies.
• Experience supporting identity integration initiatives following mergers and acquisitions.
• Familiarity with privileged access management and enterprise identity security best practices.

Responsibilities

• Identity Platform Engineering: Configure, implement, maintain, and troubleshoot enterprise identity platforms, including Okta, Duo, Active Directory, and Microsoft Entra ID.
• SSO & MFA Migration: Support migrations from legacy authentication and MFA solutions to modern identity platforms. Configure authentication policies, validate application functionality, and coordinate production cutovers.
• Application Federation: Implement and troubleshoot authentication and federation integrations using SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and related protocols.
• Directory Services Integration: Configure virtual directory services and LDAP integrations to support authentication for legacy applications and enterprise resources.
• Identity Lifecycle Automation: Integrate identity platforms with HR systems and other enterprise applications to automate user provisioning, profile updates, and deprovisioning.
• Hybrid Identity Management: Configure and troubleshoot directory synchronization, identity mapping, authentication, and access across multiple AD domains and identity platforms.
• Identity Integration & Migration: Execute identity integration and migration initiatives associated with organizational changes, acquisitions, and consolidation of identity environments.
• Automation & Scripting: Develop PowerShell scripts, REST API integrations, and automated workflows to improve identity administration, reduce manual effort, and increase provisioning accuracy.
• Technical Project Delivery: Independently manage engineering activities from requirements gathering and dependency analysis through implementation, testing, cutover, validation, documentation, and operational handoff.
• Security & Troubleshooting: Diagnose complex authentication and authorization issues, implement secure configurations, and support least-privilege access practices.
• Cross-Functional Collaboration: Partner with identity, security, infrastructure, and application teams to resolve technical dependencies and deliver successful integrations.
• Documentation & Knowledge Transfer: Create technical documentation, integration diagrams, troubleshooting guides, and operational runbooks while transferring knowledge to support teams.

Skills

Okta

Duo

Active Directory

Entra ID

PowerShell scripting

REST APIs

Tools

Radiant Logic

PowerShell

REST APIs

SAML 2.0

Job description

Yoh is seeking an Identity & Access Engineer for a 6- to 12-month contract in Peachtree Corners, GA (Hybrid). The role focuses on migrating Duo to Okta, enterprise identity platforms, and MFA/SSO configurations across AD and Entra ID.

You will design and implement authentication migrations, automate provisioning with PowerShell and REST APIs, and coordinate integrations with security and application teams. This is a contract role with potential for hire.