Okta Subject Matter Expert

Yulista Holding; Washington (District of Columbia); On-site; USD 120,000 - 180,000; Full time

Job summary

StraitSys Inc. in Washington, DC is seeking an experienced Okta Subject Matter Expert (SME) to support the DOJ EOUSA OCIO Cybersecurity Services IAM program.

The role focuses on Okta Identity Engine (OIE), ASA, and OPA, providing design, configuration, and maintenance of enterprise identity services. The Okta SME will enable secure authentication, SSO, MFA, federation, and privileged access management, collaborating with government stakeholders and DevSecOps teams to advance Federal Zero Trust

Qualifications

• Hands-on experience implementing Okta Identity Engine in enterprise environments.
• Experience with Okta SSO and MFA, authentication policies, and app integrations.
• Experience with SAML 2.0, OIDC, OAuth 2.0, and SCIM.
• Experience with Okta ASA and/or OPA and privileged access management.

Responsibilities

• Serve as SME for Okta Identity Engine, IDaaS, ASA and OPA within the DOE environment.
• Design, configure, administer, maintain and enhance Okta-based authentication services.
• Implement SSO/MFA across applications and integrate with AD and SailPoint IdentityIQ.
• Onboarding, federation, policy configuration, and privileged access management support.

Skills

Okta expertise

IAM design

SAML/OIDC

SSO/MFA

Education

Bachelor's degree in CS/IT

Tools

Okta Identity Engine (OIE)

Okta ASA

Okta OPA

Job description

StraitSys IncRegular Okta SME

Clearance Level: Location: EOUSA Headquarters, 175 N Street NE, Washington, DC. Remote work permitted if authorized by COR.

PRIMARY FUNCTION

StraitSys is seeking an experienced Okta Subject Matter Expert (SME) to support the Department of Justice (DOJ), Executive Office for United States Attorneys (EOUSA), Office of the Chief Information Officer (OCIO), Cybersecurity Services (CSS) Identity and Access Management (USAidam) Program in Washington, DC.

The Okta SME will provide technical expertise in the design, configuration, integration, administration, maintenance, and enhancement of enterprise Identity and Access Management (IAM) solutions, with a primary focus on Okta Identity Engine (OIE), Okta Advanced Server Access (ASA), and Okta Privileged Access (OPA).

This individual will support secure authentication, Single Sign-On (SSO), Multi-Factor Authentication (MFA), application federation, privileged access management, and identity lifecycle integration across the USAidam environment. The Okta SME will collaborate with Government stakeholders, SailPoint engineers, cybersecurity personnel, and DevSecOps teams to maintain reliable identity services, automate access-management processes, troubleshoot complex technical issues, and advance Federal Zero Trust Architecture objectives.

The position will support ongoing Operations and Maintenance (O&M), application onboarding, system enhancements, security compliance, and continuous improvement of USAidam identity and authentication capabilities.

ESSENTIAL FUNCTIONS

Serve as a technical SME for Okta Identity Engine, Okta Identity-as-a-Service (IDaaS), Okta Advanced Server Access, and Okta Privileged Access within the USAidam environment.

Design, configure, administer, maintain, and enhance Okta-based authentication and identity services supporting USAlogin and USApriv.

Implement and maintain SSO and MFA capabilities using SAML 2.0, OIDC, Okta Verify, PIV credentials, and other approved authentication technologies.

Configure and maintain Okta integrations with enterprise applications, Active Directory, SailPoint IdentityIQ, DOJ Login, and external identity providers.

Support application onboarding and federation, including Okta Org2Org connections, authentication policies, user provisioning, role assignments, and access management.

Deploy, configure, troubleshoot, and maintain Okta AD agents, Okta Verify for Desktop, and Okta ASA/OPA clients and agents.

Configure and maintain privileged access controls for Windows, Linux, and AWS environments, enforcing least privilege and strong authentication requirements.

Support onboarding of Windows and Linux servers into the USApriv privileged access management environment, including agent deployment, configuration, and role management.

Develop and maintain automated processes for privileged account discovery, provisioning, entitlement updates, deprovisioning, and lifecycle management.

Integrate privileged account management processes with SailPoint IdentityIQ governance workflows and access certification requirements.

Configure and support privileged session recording, audit logging, and forwarding of security events to Government-designated monitoring systems.

Troubleshoot complex authentication, federation, provisioning, integration, and privileged-access issues escalated by the USAidam Helpdesk or Government stakeholders.

Develop and maintain automation scripts and API integrations using technologies such as PowerShell, JSON, REST APIs, and AWS Lambda.

Support application and system patching, security updates, vulnerability remediation, and routine O&M activities.

Participate in Agile/DevSecOps development activities, including configuration management, testing, regression testing, User Acceptance Testing (UAT), and production deployments.

Support security and compliance activities, including access reviews, audit reporting, Security and Privacy Assessment & Authorization (SPA&A), and Federal Zero Trust initiatives.

Evaluate emerging Okta capabilities and recommend improvements to authentication, privileged access, automation, security, and system performance.

Develop and maintain technical documentation, configuration guides, system design documentation, Standard Operating Procedures (SOPs), and knowledge-transfer materials.

Collaborate with Government Program Managers, cybersecurity personnel, SailPoint engineers, DevSecOps teams, and application owners to ensure reliable and secure identity services.

REQUIRED QUALIFICATIONS

Demonstrated hands-on experience implementing, configuring, administering, and supporting Okta Identity Engine (OIE) in enterprise environments.

Experience implementing and maintaining Okta-based SSO, MFA, authentication policies, and application integrations.

Experience with authentication and federation protocols, including SAML 2.0, OIDC, OAuth 2.0, and SCIM.

Experience configuring and troubleshooting Okta integrations with Active Directory, enterprise applications, and external identity providers.

Experience implementing, configuring, or maintaining Okta Advanced Server Access (ASA) and/or Okta Privileged Access (OPA).

Experience supporting privileged account management, role-based access control (RBAC), least privilege, and privileged account lifecycle processes.

Experience deploying, configuring, maintaining, and troubleshooting Okta agents, connectors, and supporting infrastructure.

Experience troubleshooting complex authentication, identity federation, access provisioning, and system integration issues.

Experience supporting Windows and Linux server environments and enterprise directory services.

Familiarity with scripting, automation, APIs, and identity-management integrations.

Experience supporting enterprise IT operations, system maintenance, patching, testing, and deployment activities.

Strong technical troubleshooting, documentation, communication, and stakeholder coordination skills.

Ability to work collaboratively with cybersecurity engineers, application owners, developers, and Government stakeholders.

PREFERRED QUALIFICATIONS

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Systems, or a related technical discipline.


• Okta Certified Administrator, Okta Certified Consultant, or other relevant Okta certification.


• CompTIA Security+, CISSP, or other relevant cybersecurity certification.


• Experience supporting DOJ, EOUSA, or another Federal Government organization.


• Experience integrating Okta with SailPoint IdentityIQ, including SailPoint's Okta Connector.


• Experience configuring Okta Org2Org federation and integrations with external identity providers.


• Experience with PIV, PIV-I, PIV-C, and derived PIV authentication.


• Experience supporting Okta ASA/OPA in large-scale Windows, Linux, and cloud server environments.


• Experience with AWS Lambda, PowerShell, REST APIs, and identity-management automation.


• Experience with Splunk or comparable enterprise security monitoring and audit logging tools.


• Familiarity with GitLab, CI/CD pipelines, Agile development, and DevSecOps methodologies.


• Experience supporting Federal Zero Trust Architecture initiatives and NIST SP 800-63, NIST SP 800-207, and NIST SP 800-53 requirements.


• Experience supporting Federal security authorization, vulnerability remediation, and compliance activities.


• Experience developing technical documentation, integration guides, SOPs, and operational support procedures.

PREFERENCE STATEMENT

Preference will be given to Calista shareholders and their descendants and to spouses of Calista shareholders, and to shareholders of other corporations created pursuant to the Alaska Native Claims Settlement Act, in accordance with Title 43 U.S. Code 1626(g).

EEO STATEMENT

Additionally, it is our policy to select, place, train and promote the most qualified individuals based upon relevant factors such as work quality, attitude and experience, so as to provide equal employment opportunity for all employees in compliance with applicable local, state and federal laws and without regard to non-work related factors such as race, color, religion/creed, sex, national origin, age, disability, marital status, veteran status, pregnancy, sexual orientation, gender identity, citizenship, genetic information, or other protected status. When applicable, our policy of non-discrimination applies to all terms and conditions of employment, including but not limited to, recruiting, hiring, training, transfer, promotion, placement, layoff, compensation, termination, reduction in force and benefits.

REASONABLE ACCOMMODATION

It is Calista and Subsidiaries' business philosophy and practice to provide reasonable accommodations, according to applicable state and federal laws, to all qualified individuals with physical or mental disabilities.

The statements contained in this job description are intended to describe the general content and requirements for performance of this job. It is not intended to be an exhaustive list of all job duties, responsibilities, and requirements.

This job description is not an employment agreement or contract. Management has the exclusive right to alter the scope of work within the framework of this job description at any time without prior notice.