Senior Identity Security Engineer – IGA, PAM, ISPM

Okta; Bellevue (KY); On-site; USD 161,000 - 221,000; Full time

Job summary

Okta is seeking a Staff Identity Security Engineer to own OIG, OPA, and ISPM implementations, guiding technical direction and raising engineering standards. You’ll mentor engineers, drive architecture discussions, and deliver design docs that translate into production-ready Jira epics.

The role emphasizes autonomy, senior-level problem solving, and deep experience with identity governance, PAM, and ISPM. Join a team building secure identity posture at scale.

Qualifications

• 4+ years of enterprise IGA, PAM/ISPM tools experience.
• Birthright provisioning models and RBAC architectures in production.
• PAM tooling with Zero Standing Privilege and Just-In-Time access.
• ISPM tools that integrate with EDR solutions such as CrowdStrike.
• Identity standards: SAML, OIDC, OAuth 2.0, SCIM, and RBAC concepts.
• Lifecycle ownership from joiner/mover/leaver end-to-end to production.
• SOX/compliance experience with audit evidence requirements and access cert integrity.
• Autonomy and executive communication skills for leadership updates.

Responsibilities

• Own OIG architecture end-to-end: design access workflows and RBAC structures.
• Lead lifecycle, birthright, and RBAC strategy across the enterprise.
• Drive Workday integration architecture with Real-Time Sync and reconciliation rules.
• Design and harden mover/leaver automation and decommission stale access.
• Lead OPA, ISPM, and Zero Standing Privilege initiatives including JIT and break-glass.
• Own PAM and ISPM telemetry and KPIs to track privilege reduction and remediation.
• Build and maintain Okta Workflows automation for access requests and remediation.
• Mentor engineers, review designs, and present risk updates and roadmaps to leadership.
• Collaborate with cross-functional teams to raise the security posture.

Skills

OIG Architecture

RBAC Design

Workday Integration

PAM/ISPM

Zero Standing Privilege

JML Processes

Just-In-Time Elevation

Leadership & Mentorship

Executive Communication

Automation Design

Tools

Okta OIG

OPA

ISPM

Okta Workflows

Job description

Okta is seeking a Staff Identity Security Engineer to own OIG, OPA, and ISPM implementations, guiding technical direction and raising engineering standards. You’ll mentor engineers, drive architecture discussions, and deliver design docs that translate into production-ready Jira epics.

The role emphasizes autonomy, senior-level problem solving, and deep experience with identity governance, PAM, and ISPM. Join a team building secure identity posture at scale.