OKTA IAM engineer

The Planet Group; Exton (PA); Hybrid; USD 140,000 - 190,000; Full time

Job summary

The Planet Group seeks a Senior Okta Platform Engineer to design and manage advanced Okta infrastructure, security, and authentication policies. You will lead deployment, integrate devices, and enable passwordless solutions across platforms.

Ideal candidates bring 5–10 years in IAM/Security, deep Okta expertise, and strong scripting/IaC skills to automate identity operations and troubleshoot cross-domain issues.

Qualifications

• 5–10 years in IAM/Security Engineering with hands-on Okta Workforce Identity.
• Proven experience engineering Okta FastPass and passwordless authentication for mobile and desktop.
• Hands-on design of complex Okta authentication, sign-on, and device policies.
• Scripting and IaC: Python, PowerShell, Okta APIs, Terraform or OpenTofu.
• Strong networking and infrastructure skills for cross-domain troubleshooting.
• L3 production identity platform engineering experience.

Responsibilities

• Design, engineer, and support enterprise Okta Workforce Identity architectures and complex access policies.
• Engineer passwordless solutions with Okta FastPass across desktop and mobile.
• Implement Device Trust, FIDO2/WebAuthn, step-up authentication, and endpoint integrations.
• Perform L3 production support and on‑call rotations for identity services.
• Automate identity operations using Okta APIs, Workflows, Python, PowerShell, Terraform/OpenTofu.

Skills

Okta Workforce Identity

Okta FastPass

Passwordless

Python

PowerShell

Terraform/OpenTofu

Networking

L3 Engineering

Intune

Workspace ONE

Okta APIs

Tools

Intune

Workspace ONE

Mac/iOS

Job description

Location: Exton, PA (Hybrid – 3 days onsite)

Duration: 12 Months

We are seeking a Senior Okta Platform Engineer with deep hands‑on experience across Okta infrastructure, security, networking, and modern authentication. This is not a general IAM or basic app‑integration role—we are looking for an L3 engineering expert who can design complex policies, troubleshoot across network/firewall layers, and lead deployment for Okta

Key Responsibilities:

• Design, engineer, and support enterprise Okta Workforce Identity architectures and complex access policies.
• Engineer modern passwordless solutions, with a strong focus on Okta FastPass across desktop and mobile platforms (iOS/Android).
• Implement Device Trust, FIDO2/WebAuthn, step‑up authentication, and endpoint management integrations (Intune, Workspace ONE, Mac/iOS).
• Perform L3 production support, deep‑drop troubleshooting across network, firewall, and infrastructure boundaries, and participate in on‑call rotations.
• Automate identity operations using Okta APIs, Okta Workflows, Python, PowerShell, and Terraform/OpenTofu.

Must‑Have Qualifications:

• 5–10 years in IAM/Security Engineering with hands‑on expertise in Okta Workforce Identity Cloud.
• Proven experience engineering Okta FastPass and passwordless auth, specifically on mobile/macOS/Windows.
• Hands‑on experience designing complex Okta authentication, sign‑on, and device policies.
• Scripting & IaC proficiency (Python, PowerShell, Okta APIs, Terraform or OpenTofu).
• Strong networking & infrastructure foundation for cross‑domain troubleshooting (firewalls, proxies, logs via Splunk/Elastic).
• True L3 engineering experience supporting production identity platforms.