Okta IAM Engineer: SSO, MFA, Passwordless

Centraprise, Corp.; Malvern (Chester County); On-site; USD 120,000 - 180,000; Full time

Job summary

Centraprise, Corp. is seeking an experienced IAM/identity security engineer in the United States to design, configure, and sustain Okta-based workforce identity solutions, including SSO, MFA, and application integrations.

The role emphasizes passwordless authentication, device trust, and standards such as SAML, OAuth, and OIDC. You will integrate applications, troubleshoot issues, and manage production support, security hardening, and CI/CD automation, while documenting procedures for operations

Qualifications

• 5–10 years of experience in IAM, identity platform engineering, or security engineering.
• Hands-on experience with Okta Workforce Identity or other enterprise IdPs such as Microsoft Entra ID or Ping Identity.
• Strong knowledge of SAML, OAuth, OIDC, SCIM, SSO, MFA, and identity lifecycle management.
• Experience with Microsoft Intune or Omnissa Workspace ONE.
• Knowledge of Terraform, GitHub, CI/CD, and monitoring tools such as Splunk or Elastic is preferred.

Responsibilities

• Design, configure, and maintain Okta Workforce Identity solutions, SSO, MFA, federation, and application integrations.
• Implement passwordless authentication, Okta FastPass, FIDO2, Device Trust, and device-based authentication.
• Integrate applications using SAML 2.0, OAuth 2.0, OIDC, SCIM, and REST APIs.
• Troubleshoot authentication, provisioning, and application integration issues.
• Manage production support, incident resolution, monitoring, security hardening, and platform upgrades.
• Maintain technical documentation, operational procedures, and CI/CD automation.

Skills

Okta IAM

SSO/MFA

OIDC/SAML

IaC

CI/CD

Education

Bachelor's in CS/IT

Tools

Terraform

GitHub Actions

Splunk

Elastic

Job description

Centraprise, Corp. is seeking an experienced IAM/identity security engineer in the United States to design, configure, and sustain Okta-based workforce identity solutions, including SSO, MFA, and application integrations.

The role emphasizes passwordless authentication, device trust, and standards such as SAML, OAuth, and OIDC. You will integrate applications, troubleshoot issues, and manage production support, security hardening, and CI/CD automation, while documenting procedures for operations