Identity & Access Engineer - Okta, Zero Trust, Remote

Cloudera; United States; Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Generous PTO

Flexible WFH Policy

Unplugged Days

Mental & Physical Wellness programs

Phone and Internet Reimbursement

Continued Career Development

Volunteer Time Off

Employee Resource Groups

Job summary

Cloudera is seeking an Identity Engineer to join our Infrastructure Operations team. You will help run Okta as code, automate identity lifecycles, and implement least-privilege and just-in-time access across AWS, Azure, and Google Cloud.

You will collaborate with Security, HR systems, and support teams to keep identity infrastructure robust and auditable. The role emphasizes designing and automating identity lifecycle processes, maintaining Okta environments, and enabling secure self-service

Qualifications

• 6+ years of experience operating and deploying Okta or an equivalent identity provider.
• Strong experience with authentication protocols and systems (OIDC, SAML, SCIM) and AD/LDAP.
• Experience with access governance or JIT platforms (Lumos, SailPoint, ConductorOne).
• Experience building integrations and automation against web service APIs (Python, Go or JavaScript).
• IaC experience (Terraform) in a CI/CD environment (GitHub, Spacelift or Jenkins).
• Experience collaborating with multiple teams on identity changes affecting many users.
• Secure automation of privileged access, with separation of duties and secrets management.
• Okta Workflows experience; AWS IAM Identity Center or multi-account cloud access; HR system integrations (Workday).
• Experience with compliance (SOC 2, SOX) and Zero Trust concepts.

Responsibilities

• Own delivery of identity projects and contribute to architecture decisions.
• Administer and improve Okta environments (groups, policies, integrations).
• Build identity as code with Terraform and CI/CD pipelines; review change requests.
• Develop tooling and automation for secure self-service under Zero Trust.
• Ensure auditability with backups, change tracking and centralized logging.
• Design and automate identity lifecycle processes (joiner, mover, leaver).
• Onboard applications to access request and just-in-time platforms; replace manual permissions.
• Align Okta estate with naming and lifecycle standards; remediate legacy accounts.
• Coordinate with HR systems to manage downstream access impacts.
• Support identity federation into AWS, Azure and Google Cloud.
• Write runbooks; participate in on-call rotations.

Tools

Okta

Terraform

Python

Go

JavaScript

CI/CD

GitHub

Spacelift

Jenkins

AWS IAM Identity Center

Workday

Active Directory

RADIUS

Job description

Cloudera is seeking an Identity Engineer to join our Infrastructure Operations team. You will help run Okta as code, automate identity lifecycles, and implement least-privilege and just-in-time access across AWS, Azure, and Google Cloud.

You will collaborate with Security, HR systems, and support teams to keep identity infrastructure robust and auditable. The role emphasizes designing and automating identity lifecycle processes, maintaining Okta environments, and enabling secure self-service