Senior Identity Security Engineer - IGA & PAM

Empleora; Northern (KY); Hybrid; USD 150,000 - 210,000; Full time

Job summary

Okta seeks a Staff Identity Security Engineer to own OIG, OPA, and ISPM deployments, shaping architecture and elevating engineering standards. You will mentor, review designs, and drive production-ready solutions, from concept to rollout, in a fast-paced environment.

You will lead strategic initiatives across lifecycle provisioning, RBAC, and privileged access, partnering with Workday integrations and security tooling to reduce risk and improve postures.

Qualifications

• Minimum 4+ years of direct, advanced experience managing and administering enterprise IGA, PAM/ISPM tools and platforms.
• Demonstrated hands-on experience designing Birthright Provisioning models and RBAC architectures in production environments.
• Production experience with OPA or equivalent PAM tooling, including Zero Standing Privilege, Just-In-Time access models, break-glass design, and admin tiering.
• Production experience with ISPM tools (such as Okta ISPM) that integrate with EDR solutions like CrowdStrike Falcon.
• Solid grounding in identity and access standards (SAML, OIDC, OAuth 2.0, SCIM) and RBAC concepts.
• Track record of owning technical designs for identity lifecycle problems end-to-end, from design to production rollout.
• Experience operating in SOX and compliance-critical environments with audit evidence requirements.

Responsibilities

• OIG Architecture Ownership: design end-to-end architecture for access workflows and certification campaigns.
• Lifecycle, Birthright & RBAC Strategy: design automated birthright access rules and RBAC frameworks.
• Workday Integration Architecture: balance reconciliation with Real-Time Sync for Workday connections.
• Mover/Leaver Automation: implement automated joiner/mover/leaver processes and secure decommissioning.
• OPA, ISPM & ZSP: lead privileged access and zero standing privilege initiatives with JIT and break-glass.
• PAM & ISPM Metrics: establish telemetry and KPIs for privilege reduction and remediation.
• Okta Workflows Automation: streamline access requests, approvals, and remediation.
• Technical Leadership & Mentorship: review designs, mentor engineers, communicate risks and roadmaps.

Skills

IGA/PAM/ISPM

RBAC

Birthright provisioning

Workday integration

Zero Standing Privilege

Just-In-Time access

PAM tooling

ISPM tooling

REST APIs

Executive communication

Architecture ownership

Tools

Okta ISPM

OPA

Workday

CrowdStrike Falcon

Okta Workflows

Jira

REST APIs

JSON parsing

Job description

Okta seeks a Staff Identity Security Engineer to own OIG, OPA, and ISPM deployments, shaping architecture and elevating engineering standards. You will mentor, review designs, and drive production-ready solutions, from concept to rollout, in a fast-paced environment.

You will lead strategic initiatives across lifecycle provisioning, RBAC, and privileged access, partnering with Workday integrations and security tooling to reduce risk and improve postures.