OKTA IAM Lead

Amtex Systems Inc; Malvern (Chester County); On-site; USD 140,000 - 190,000; Full time

Job summary

Amtex Systems Inc. in Malvern is seeking a Senior Okta / IAM Platform Engineer to join a seasoned identity engineering team.

This hands-on role focuses on designing, engineering, securing, and supporting a complex enterprise Okta environment. The ideal candidate brings deep production-level Okta Workforce Identity experience along with strong infrastructure, security, networking, and authentication knowledge to work across multiple teams and hit the ground running in a demanding enterprise

Qualifications

• 5–10+ years of hands-on IAM/identity engineering experience in enterprise environments.
• Hands-on Okta Workforce Identity experience strongly preferred and prioritized.
• Engineering and configuring Okta in production environments beyond predefined tasks.
• Strong understanding of Okta policies and the policy engine.
• Experience with Okta FastPass, passwordless authentication, and/or device trust.
• Mobile authentication and Mac device authentication experience.
• Strong understanding of identity, infrastructure, security, and networking.
• Understand authentication flows across network zones, firewalls, security controls, infrastructure and identity platform.
• Troubleshooting complex production authentication and identity issues at an L3 engineering level.
• Strong knowledge of SAML, OAuth, OIDC, REST APIs.
• Experience with scripting/automation, particularly Python and/or PowerShell.
• Ability to work independently and hit the ground running in a complex enterprise environment.
• Strong troubleshooting and problem-solving skills for gnarly production issues.
• Experience participating in production support, change management, rollout activities, and on-call rotations.
• Strong communication skills across security, networking, infrastructure, monitoring, and architecture teams.

Skills

IAM/Identity engineering

Okta Workforce Identity

Okta production engineering

Okta policies engine

Okta FastPass / passwordless

Mobile authentication

Mac device authentication

SAML / OAuth / OIDC / REST APIs

Python / PowerShell

Network security / infrastructure

Authentication flows across zones

L3 production troubleshooting

Independent / self-starter

Production support / on-call

Cross-team communication

Job description

Seeking a Senior Okta / IAM Platform Engineer to join a highly experienced identity engineering team responsible for the design, engineering, security, and ongoing support of a complex enterprise Okta environment.

This is a hands-on Senior Engineer role, not an application onboarding or traditional architecture position. The ideal candidate will have deep, production-level Okta Workforce Identity experience combined with strong infrastructure, security, networking, and authentication knowledge.

Must Haves

• 5–10+ years of hands-on IAM/identity engineering experience, with strong enterprise-level experience.
• Hands-on Okta Workforce Identity experience is strongly preferred and will be prioritized.
• Experience engineering and configuring Okta in a production environment, beyond simply supporting or implementing predefined tasks.
• Strong understanding of Okta policies and the Okta policy engine, including the ability to understand existing configurations and determine how to modify or engineer solutions.
• Hands-on experience with Okta FastPass, passwordless authentication, and/or device trust.
• Experience with mobile authentication and modern authentication technologies; experience with Mac/device authentication is highly valuable.
• Strong understanding of identity, infrastructure, security, and networking.
• Ability to understand authentication flows across network zones, firewalls, security controls, infrastructure, and the identity platform.
• Experience troubleshooting complex production authentication and identity issues at an L3 engineering level.
• Strong understanding of SAML, OAuth, OIDC, REST APIs, and modern authentication protocols.
• Experience with scripting/automation, particularly Python and/or PowerShell.
• Ability to work independently and hit the ground running in a complex enterprise environment.
• Strong troubleshooting and problem-solving skills with the ability to diagnose complex, "gnarly" production issues.
• Experience participating in production support, change management, rollout activities, and on-call rotations.
• Strong communication skills and the ability to work across security, networking, infrastructure, monitoring, and architecture teams.