Okta Zero Trust Engineer (TS/SCI Eligible)

The Amatriot Group; Quantico (VA); Hybrid; USD 120,000 - 145,000; Full time

Job summary

The Amatriot Group is hiring a Zero Trust Security Engineer – Okta to support the DCSA program in Quantico, VA. The role administers, configures, maintains, and integrates the Okta Identity Cloud to ensure secure access to DCSA applications and resources, using SSO, MFA, and lifecycle management.

Candidates should have 5+ years hands-on Okta experience, active Top Secret clearance with TS upgrade eligibility, and 8570 IAT Level II certifications.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Systems Management, or related field, or equivalent military service and/or 5+ years of relevant work experience.
• Minimum of 5 years hands-on experience administering, configuring, and supporting Okta Identity Cloud in enterprise or federal environments.
• Strong understanding of identity-centric security, directory services (AD/LDAP), and federation protocols (SAML 2.0, OIDC, OAuth 2.0).
• Ability to communicate complex technical ideas to diverse audiences in writing and speech.
• Meet 8570 IAT Level II certification requirements at time of hire (e.g., Security+ CE, CCNA Security, CySA+, etc.).
• Active Top Secret clearance and eligibility for upgrade to TS/SCI.

Responsibilities

• Manage, configure, and maintain daily operations of Okta Identity Cloud (Universal Directory, SSO, MFA).
• Develop, implement, and enforce granular sign-on policies and adaptive MFA.
• Design, implement, and troubleshoot automated provisioning and lifecycle workflows across applications.
• Configure Okta Workflows; use PowerShell and Python to automate IAM tasks.
• Integrate Okta with Active Directory, LDAP, HR systems, AWS, and Azure AD; onboard SaaS and on-prem apps using SAML, OIDC, WS-Fed, SCIM.
• Collaborate with cybersecurity teams to integrate Okta logs with SIEM tools like Splunk.
• Create and maintain runbooks, SOPs, architecture diagrams, and user guides.
• Train and mentor junior staff on Okta troubleshooting and identity lifecycle actions.

Skills

Identity security

Directory services

Federation protocols

SAML 2.0

OIDC

OAuth 2.0

Communication

Education

Bachelor’s degree or equivalent

Tools

Okta Identity Cloud

Job description

The Amatriot Group is hiring a Zero Trust Security Engineer – Okta to support the DCSA program in Quantico, VA. The role administers, configures, maintains, and integrates the Okta Identity Cloud to ensure secure access to DCSA applications and resources, using SSO, MFA, and lifecycle management.

Candidates should have 5+ years hands-on Okta experience, active Top Secret clearance with TS upgrade eligibility, and 8570 IAT Level II certifications.