Senior Identity Security Engineer — IGA, PAM & ZSP

Okta; Chicago (IL); On-site; USD 180,000 - 240,000; Full time

Job summary

Okta is seeking a Staff Identity Security Engineer to own the OIG, OPA, and ISPM implementations. You will set technical direction, mentor engineers, and drive architectural excellence across identity security initiatives for a global workforce.

You will lead end-to-end design of identity lifecycle, RBAC, and privileged access programs, collaborating with executive stakeholders to advance zero-standing-privilege controls and real-time integration patterns.

Qualifications

• Minimum 4+ years of direct, advanced experience managing and administering enterprise IGA, PAM/ISPM tools and platforms.
• Birthright provisioning models and RBAC architectures in production environments.
• Production experience with OPA or equivalent PAM tooling, including Zero Standing Privilege, Just-In-Time access models.
• Production experience with ISPM tools (such as Okta ISPM) that integrate with EDR solutions like CrowdStrike Falcon.
• Solid grounding in identity standards (SAML, OIDC, OAuth 2.0, SCIM) and RBAC concepts.
• Track record of owning technical designs for identity lifecycle problems end-to-end.
• Experience operating in SOX and compliance-critical environments.

Responsibilities

• OIG Architecture Ownership: design access request workflows, entitlement structures, and certification campaigns.
• Lifecycle, Birthright & RBAC Strategy: deploy birthright rules and RBAC frameworks across the enterprise.
• Workday Integration Architecture: balance scheduled reconciliation with Real-Time Sync and define attribute sets.
• Mover/Leaver Automation: automate joiner/mover/leaver processes and decommission stale access.
• OPA, ISPM & ZSP: design privileged access, JIT elevation, break-glass access models.
• PAM & ISPM Metrics: define KPIs, monitor standing privileges reduction and JIT adoption.
• Okta Workflows Automation: streamline access requests and remediation across IGA and PAM.
• Technical Leadership & Mentorship: review designs and communicate risk to leadership.

Skills

Identity governance

Privileged access

RBAC strategy

Workday integration

Zero standing privilege

Tools

Okta ISPM

OPA

CrowdStrike Falcon

Job description

Okta is seeking a Staff Identity Security Engineer to own the OIG, OPA, and ISPM implementations. You will set technical direction, mentor engineers, and drive architectural excellence across identity security initiatives for a global workforce.

You will lead end-to-end design of identity lifecycle, RBAC, and privileged access programs, collaborating with executive stakeholders to advance zero-standing-privilege controls and real-time integration patterns.