Senior ICAM Engineer: Remote Identity Automation Lead

Technologist, Inc.; Northern (KY); Hybrid; USD 120,000 - 160,000; Full time

Benefits offered by this job

Health Care Plan

401k with employer match

Paid Time Off

Disability insurance

Training & Development

Job summary

Mount Airey Group (MAG), a wholly owned subsidiary of Technologist Inc., is seeking a Senior ICAM Engineer for a full-time telework role. The engineer will design, implement, and support enterprise ICAM using Okta, SSO, and MFA, developing PowerShell automation and REST API integrations across cloud and on-prem environments.

Responsibilities include provisioning, federation, identity schemas, and automation scripts, with emphasis on Zero Trust security and policy enforcement.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or related field, or equivalent professional experience.
• Minimum of 2 years of hands-on experience administering Okta Identity Cloud including application integrations, identity lifecycle management, automation, and REST API development.
• 3+ years of hands-on IAM/ICAM experience with enterprise platforms like Microsoft Entra ID or Ping Identity.
• SECRET level clearance is required.
• Willingness to travel to Washington, DC for meetings.

Responsibilities

• Administer, configure, and maintain enterprise Okta Identity Cloud environments supporting workforce identity and access management.
• Design, implement, and troubleshoot SSO integrations (SAML 2.0, OAuth 2.0, OIDC).
• Configure authentication policies, adaptive MFA, phishing-resistant auth, and sign-on policies.
• Develop and maintain user lifecycle automation including provisioning, deprovisioning, mappings, and group rules.
• Design and support inbound/outbound identity federation with internal and external IdPs.
• Develop custom user profile attributes and identity schemas.
• Integrate enterprise apps with Okta ensuring policy and ICAM compliance.
• Troubleshoot complex authentication, provisioning, and identity sync issues.
• Develop PowerShell automation using Okta REST APIs for admin tasks and large-scale updates.
• Create automated batch processes for identity management with data integrity.
• Develop reusable automation scripts to improve efficiency.
• Integrate with REST APIs to automate identity workflows.
• Explore Python-based automation for API integrations and reporting.
• Support PKI, PIV/CAC authentication and smart card integrations.
• Create architecture docs, SOPs, diagrams, and engineering materials.
• Participate in Zero Trust initiatives with modern identity controls.
• Analyze identity security events and assist with audits and investigations.
• Collaborate with security, network, and app teams on secure identity solutions.
• Perform testing, deployments, and Tier III support for identity services.
• Evaluate and recommend new identity tech and automation enhancements.

Skills

Okta Identity Cloud

Microsoft Entra ID

PowerShell

REST APIs

JSON

SAML 2.0

OAuth 2.0

OIDC

MFA

Zero Trust

PKI

PIV/CAC

Identity Federation

Education

Bachelor's degree in IT/CS/Cybersecurity or equivalent

SECRET clearance

Tools

Okta REST APIs

JSON

Active Directory

LDAP

Job description

Mount Airey Group (MAG), a wholly owned subsidiary of Technologist Inc., is seeking a Senior ICAM Engineer for a full-time telework role. The engineer will design, implement, and support enterprise ICAM using Okta, SSO, and MFA, developing PowerShell automation and REST API integrations across cloud and on-prem environments.

Responsibilities include provisioning, federation, identity schemas, and automation scripts, with emphasis on Zero Trust security and policy enforcement.