Okta Subject Matter Expert

Yulista Solutions; Washington (District of Columbia); On-site; USD 120,000 - 160,000; Full time

Job summary

StraitSys Inc. is seeking an experienced Okta Subject Matter Expert (SME) to support DOJ/EOUSA in Washington, DC.

The role focuses on designing, configuring, administering, and enhancing enterprise IAM with Okta Identity Engine (OIE), ASA, and OPA, ensuring secure authentication, SSO, and MFA across the USAidam environment. You will collaborate with government stakeholders, SailPoint engineers, cybersecurity personnel, and DevSecOps teams to automate access-management processes, troubleshoot

Qualifications

• Hands-on experience with Okta Identity Engine in enterprise environments.
• Experience implementing Okta SSO and MFA with authentication policies.
• Experience with federation protocols (SAML 2.0, OIDC, OAuth 2.0, SCIM).
• Troubleshooting Okta integrations with Active Directory and enterprise apps.

Responsibilities

• Serve as technical SME for Okta Identity Engine, IDaaS, ASA, and OPA within the USAidam environment.
• Design, configure, administer, and enhance Okta-based authentication and identity services for USAlogin and USApriv.
• Implement and maintain SSO and MFA capabilities using SAML 2.0, OIDC, Okta Verify, PIV credentials.
• Configure Okta integrations with Active Directory and enterprise applications.
• Support onboarding of applications and federation, including Org2Org connections, provisioning, and access management.
• Develop automation scripts and API integrations using PowerShell, JSON, REST APIs, and AWS Lambda.
• Participate in Agile/DevSecOps activities and support security/compliance initiatives.

Skills

Okta Identity Engine

Okta SSO

MFA

Federation protocols

Active Directory integration

SailPoint integration

Tools

PowerShell

REST APIs

JSON

AWS Lambda

Job description

StraitSys Inc

Regular

Okta SME

Clearance Level:

Location: EOUSA Headquarters, 175 N Street NE, Washington, DC. Remote work permitted if authorized by COR.

PRIMARY FUNCTION

StraitSys is seeking an experienced Okta Subject Matter Expert (SME) to support the Department of Justice (DOJ), Executive Office for United States Attorneys (EOUSA), Office of the Chief Information Officer (OCIO), Cybersecurity Services (CSS) Identity and Access Management (USAidam) Program in Washington, DC.

The Okta SME will provide technical expertise in the design, configuration, integration, administration, maintenance, and enhancement of enterprise Identity and Access Management (IAM) solutions, with a primary focus on Okta Identity Engine (OIE), Okta Advanced Server Access (ASA), and Okta Privileged Access (OPA).

This individual will support secure authentication, Single Sign-On (SSO), Multi-Factor Authentication (MFA), application federation, privileged access management, and identity lifecycle integration across the USAidam environment. The Okta SME will collaborate with Government stakeholders, SailPoint engineers, cybersecurity personnel, and DevSecOps teams to maintain reliable identity services, automate access-management processes, troubleshoot complex technical issues, and advance Federal Zero Trust Architecture objectives.

The position will support ongoing Operations and Maintenance (O&M), application onboarding, system enhancements, security compliance, and continuous improvement of USAidam identity and authentication capabilities.

ESSENTIAL FUNCTIONS

Serve as a technical SME for Okta Identity Engine, Okta Identity-as-a-Service (IDaaS), Okta Advanced Server Access, and Okta Privileged Access within the USAidam environment.

Design, configure, administer, maintain, and enhance Okta-based authentication and identity services supporting USAlogin and USApriv.

Implement and maintain SSO and MFA capabilities using SAML 2.0, OIDC, Okta Verify, PIV credentials, and other approved authentication technologies.

Configure and maintain Okta integrations with enterprise applications, Active Directory, SailPoint IdentityIQ, DOJ Login, and external identity providers.

Support application onboarding and federation, including Okta Org2Org connections, authentication policies, user provisioning, role assignments, and access management.

Deploy, configure, troubleshoot, and maintain Okta AD agents, Okta Verify for Desktop, and Okta ASA/OPA clients and agents.

Configure and maintain privileged access controls for Windows, Linux, and AWS environments, enforcing least privilege and strong authentication requirements.

Support onboarding of Windows and Linux servers into the USApriv privileged access management environment, including agent deployment, configuration, and role management.

Develop and maintain automated processes for privileged account discovery, provisioning, entitlement updates, deprovisioning, and lifecycle management.

Integrate privileged account management processes with SailPoint IdentityIQ governance workflows and access certification requirements.

Configure and support privileged session recording, audit logging, and forwarding of security events to Government-designated monitoring systems.

Troubleshoot complex authentication, federation, provisioning, integration, and privileged-access issues escalated by the USAidam Helpdesk or Government stakeholders.

Develop and maintain automation scripts and API integrations using technologies such as PowerShell, JSON, REST APIs, and AWS Lambda.

Support application and system patching, security updates, vulnerability remediation, and routine O&M activities.

Participate in Agile/DevSecOps development activities, including configuration management, testing, regression testing, User Acceptance Testing (UAT), and production deployments.

Support security and compliance activities, including access reviews, audit reporting, Security and Privacy Assessment & Authorization (SPA&A), and Federal Zero Trust initiatives.

Evaluate emerging Okta capabilities and recommend improvements to authentication, privileged access, automation, security, and system performance.

Develop and maintain technical documentation, configuration guides, system design documentation, Standard Operating Procedures (SOPs), and knowledge-transfer materials.

Collaborate with Government Program Managers, cybersecurity personnel, SailPoint engineers, DevSecOps teams, and application owners to ensure reliable and secure identity services.

REQUIRED QUALIFICATIONS

• Demonstrated hands‑on experience implementing, configuring, administering, and supporting Okta Identity Engine (OIE) in enterprise environments.
• Experience implementing and maintaining Okta-based SSO, MFA, authentication policies, and application integrations.
• Experience with authentication and federation protocols, including SAML 2.0, OIDC, OAuth 2.0, and SCIM.
• Experience configuring and troubleshooting Okta integrations with Active Directory, enterprise applications