Senior Identity Security Architect - IGA, PAM & ISPM

Okta; Washington (District of Columbia); On-site; USD 161,000 - 221,000; Full time

Job summary

Okta is seeking a Staff Identity Security Engineer to own OIG, OPA, and ISPM implementations, guiding architecture and technical direction. You’ll mentor engineers, drive end-to-end lifecycle solutions, and push initiatives from concept to production in a fast-evolving security landscape.

You will collaborate with Workflows teams, integrate with Workday and EDR, and shape privileged access posture across the enterprise, including Just-In-Time elevation and break-glass processes.

Qualifications

• 4+ years of enterprise IGA/PAM/ISPM experience.
• Birthright provisioning and RBAC in production.
• PAM tooling such as OPA with Zero Standing Privilege.
• ISPM tooling integration with EDR like CrowdStrike Falcon.
• Solid understanding of SAML, OIDC, OAuth 2.0, SCIM and RBAC concepts.
• End-to-end ownership of identity lifecycle problems from design to production.
• SOX/compliance experience and audit evidence awareness.
• Autonomy with executive-ready updates and clear communication to leadership.

Responsibilities

• Own OIG architecture end-to-end — design access workflows, entitlement structures, and certification campaigns.
• Lead birthright provisioning, RBAC strategy, and joiner/mover/leaver processes.
• Drive Workday integration architecture and balance reconciliation with Real-Time Sync.
• Design and harden mover/leaver automation and joiner flows.
• Lead OPA, ISPM, and Zero Standing Privilege initiatives and tiering models.
• Own PAM and ISPM telemetry and KPI dashboards.
• Build and maintain Okta Workflows automation across IGA and PAM.
• Mentor engineers, review designs, and present risk/roadmaps to leadership.

Skills

Domain experience

Birthright provisioning

RBAC architecture

PAM tooling

ISPM tooling

Identity standards

Lifecycle ownership

Compliance experience

Autonomy & exec comms

Tools

Okta Workflows

Workday integration

CrowdStrike Falcon

Job description

Okta is seeking a Staff Identity Security Engineer to own OIG, OPA, and ISPM implementations, guiding architecture and technical direction. You’ll mentor engineers, drive end-to-end lifecycle solutions, and push initiatives from concept to production in a fast-evolving security landscape.

You will collaborate with Workflows teams, integrate with Workday and EDR, and shape privileged access posture across the enterprise, including Just-In-Time elevation and break-glass processes.