Okta Subject Matter Expert

Calista Corporation; United States; Remote; USD 120,000 - 170,000; Full time

Job summary

StraitSys Inc. is seeking an experienced Okta Subject Matter Expert (SME) to support the Department of Justice, EOUSA, in Washington, DC.

The role centers on design, configuration, integration, administration, maintenance, and enhancement of enterprise IAM solutions with a primary focus on Okta Identity Engine (OIE), Okta ASA, and Okta Privileged Access (OPA). The Okta SME will support secure authentication, SSO, MFA, application federation, and identity lifecycle integration across the USAidam

Qualifications

• Experience designing and implementing Okta IAM solutions across large environments.
• Ability to configure and maintain Okta integrations with multiple apps and directories.
• Proven track record supporting secure authentication and authorization in federal/government contexts.

Responsibilities

• Serve as technical SME for Okta Identity Engine, IDaaS, ASA, and Privileged Access in the USAidam environment.
• Design, configure, administer, maintain, and enhance Okta-based authentication services for users and applications.
• Implement SSO and MFA using SAML 2.0, OIDC, and Okta Verify across the enterprise.
• Configure Okta integrations with Active Directory, SailPoint, and external providers.
• Support onboarding of applications, federation, and user provisioning with role assignments.
• Deploy and maintain Okta agents and Privileged Access tools, ensuring least privilege.

Skills

Okta OIE

SSO

MFA

Privileged Access

Stakeholder collaboration

Tools

Okta ASA

Okta OPA

Active Directory

SailPoint IdentityIQ

OIDC/SAML 2.0

Job description

StraitSys Inc

Regular

Okta SME

Clearance Level:

Location: EOUSA Headquarters, 175 N Street NE, Washington, DC. Remote work permitted if authorized by COR.

StraitSys is seeking an experienced Okta Subject Matter Expert (SME) to support the Department of Justice (DOJ), Executive Office for United States Attorneys (EOUSA), Office of the Chief Information Officer (OCIO), Cybersecurity Services (CSS) Identity and Access Management (USAidam) Program in Washington, DC.

The Okta SME will provide technical expertise in the design, configuration, integration, administration, maintenance, and enhancement of enterprise Identity and Access Management (IAM) solutions, with a primary focus on Okta Identity Engine (OIE), Okta Advanced Server Access (ASA), and Okta Privileged Access (OPA).

This individual will support secure authentication, Single Sign-On (SSO), Multi-Factor Authentication (MFA), application federation, privileged access management, and identity lifecycle integration across the USAidam environment. The Okta SME will collaborate with Government stakeholders, SailPoint engineers, cybersecurity personnel, and DevSecOps teams to maintain reliable identity services, automate access-management processes, troubleshoot complex technical issues, and advance Federal Zero Trust Architecture objectives.

The position will support ongoing Operations and Maintenance (O&M), application onboarding, system enhancements, security compliance, and continuous improvement of USAidam identity and authentication capabilities.

ESSENTIAL FUNCTIONS

Serve as a technical SME for Okta Identity Engine, Okta Identity-as-a-Service (IDaaS), Okta Advanced Server Access, and Okta Privileged Access within the USAidam environment.

Design, configure, administer, maintain, and enhance Okta-based authentication and identity services supporting USAlogin and USApriv.

Implement and maintain SSO and MFA capabilities using SAML 2.0, OIDC, Okta Verify, PIV credentials, and other approved authentication technologies.

Configure and maintain Okta integrations with enterprise applications, Active Directory, SailPoint IdentityIQ, DOJ Login, and external identity providers.

Support application onboarding and federation, including Okta Org2Org connections, authentication policies, user provisioning, role assignments, and access management.

Deploy, configure, troubleshoot, and maintain Okta AD agents, Okta Verify for Desktop, and Okta ASA/OPA clients and agents.

Configure and maintain privileged access controls for Windows, Linux, and AWS environments, enforcing least privilege and strong authentication requirements.

Support onboarding of Windows and Linux servers into the USApriv privileged access management environment, including agent deployment, configuration, and role management.

Develop and maintain automated processes for privileged account discovery, provisioning, entitlement updates, deprovisioning, and lifecycle management.

Integrate privileged account management processes with Sail