Identity & Access Management Engineer - Okta

The Briefed; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Healthcare

401(k) plan

Paid time off

Bonus programs

Job summary

AbbVie’s Information Security & Risk Management (ISRM) team seeks an IAM Federation Services Engineer to design, implement, and manage enterprise identity solutions across a global workforce and customer identities. You will leverage Okta, Microsoft Entra ID, and PingFederate to enable secure SSO, CIAM, and MFA.

You will architect federation solutions, integrate with cloud platforms, automate identity workflows with PowerShell, and support global teams while ensuring high availability and

Qualifications

• Bachelor’s or Master’s degree in Identity and Access Management or Information Security.
• 4+ years hands-on with Okta and PingFederate.
• Experience designing enterprise IAM architectures and CIAM workflows.

Responsibilities

• Federation Solution Design: design and implement federated IAM architectures.
• System & Cloud Integration: integrate federation tech with core enterprise and cloud systems using SAML 2.0, OIDC, OAuth 2.0.
• Custom Authentication & APIs: develop and maintain login and authentication experiences using Okta APIs and widgets.
• MFA Configuration: configure and support MFA technologies (Okta Verify, PingID, MS Authenticator, FIDO2).
• Troubleshooting & Optimization: diagnose authentication/SSO issues and lifecycle provisioning.
• Infrastructure Scalability: monitor and maintain federation infrastructure for 80,000+ users.
• PowerShell Automation: write and execute scripts to automate identity workflows.
• Cross-Functional Support: provide guidance and documentation to admins and vendors.

Skills

Okta

PingFederate

PowerShell

SAML 2.0

OIDC

OAuth 2.0

CIAM

Education

Bachelor’s degree in IAM/InfoSec

Master’s degree in IAM/InfoSec

Tools

Okta Identity Engine (OIE)

PingFederate

MS Entra ID

PowerShell

Job description

AbbVie’s mission is to discover and deliver innovative medicines and solutions that solve serious health issues today and address the medical challenges of tomorrow across key therapeutic areas including immunology, oncology, neuroscience, and Allergan Aesthetics.

Join AbbVie’s Information Security & Risk Management (ISRM) team as an IAM Federation Services Engineer. In this role, you will design, implement, and manage enterprise directory and authentication solutions across a global workforce of 80,000+ internal users and customer identities. Leveraging Okta, Microsoft Entra ID, and PingFederate, you will empower global teams to securely access technology and data through modern SSO, CIAM, and MFA standards.

Key Responsibilities

• Federation Solution Design: Design and implement federated Identity and Access Management (IAM) architectures aligned with enterprise business and security requirements.
• System & Cloud Integration: Integrate identity federation technologies with core enterprise and cloud systems using industry standards including SAML 2.0, OIDC, and OAuth 2.0.
• Custom Authentication & APIs: Develop and maintain custom login and authentication experiences using Okta APIs, SDKs, and widget-based sign-in flows.
• MFA Configuration: Configure, maintain, and support multi-factor authentication (MFA) technologies, including Okta Verify, PingID, MS Authenticator, FIDO2, biometrics, and push/OTP authenticators.
• Troubleshooting & Optimization: Diagnose and resolve complex authentication, authorization, single sign-on (SSO), and automated user lifecycle provisioning breaks.
• Infrastructure Scalability: Monitor, optimize, and maintain high-performance federation infrastructure serving 80,000+ global users.
• PowerShell Automation: Write and execute advanced PowerShell scripts to automate administrative identity workflows and system management tasks.
• Cross-Functional Support: Provide technical guidance, documentation, and operational support to system administrators, cross-functional partners, and third-party vendors.

Experience & Education

• Bachelor’s degree with 5+ years of professional experience OR Master’s degree with 4+ years of professional experience in Identity and Access Management (IAM) or Information Security.
• 4+ years of hands-on experience specifically with Okta and PingFederate.

Technical Capabilities

• Proven hands-on experience with Okta Identity Engine (OIE) for Customer Identity and Access Management (CIAM) workflows (Sign-in Widget, self-service registration, B2C/B2B identity patterns).
• Advanced proficiency in PowerShell scripting for identity automation and directory management.
• Deep understanding of federation protocols and concepts (SAML 2.0, OpenID Connect, OAuth 2.0, SSO, MFA, user lifecycle management).
• Demonstrated experience supporting large-scale enterprise environments (10,000+ users required; 80,000+ users strongly preferred).

Soft Skills

• Strong analytical problem-solving skills for diagnosing complex identity logs and authentication breaks.
• Excellent written and verbal communication skills for documenting technical processes and collaborating across global teams.

Preferred Qualifications

• Industry certifications in federation technologies (e.g., Okta Certified Administrator, PingFederate / PingOne Certified, or Microsoft Entra ID Certified).
• Working knowledge of cybersecurity compliance frameworks and standards (e.g., NIST, ISO 27001).

Benefits & Total Rewards

• Comprehensive Healthcare: Medical, dental, and vision insurance coverage for eligible employees and families.
• Retirement & Savings: 401(k) plan with company matching contributions.
• Paid Time Off: Paid vacation, sick leave, and company-recognized holidays.
• Incentives: Eligible to participate in AbbVie short-term incentive and bonus programs.