Senior Okta Architect/Engineer

ASRC Federal; Virginia; Vor Ort; USD 150.000 - 190.000; Vollzeit

Benefits dieser Stelle

Telework

Onsite 2 days/wk

Zusammenfassung

ASRC Federal seeks a Senior Okta Architect/Engineer to lead enterprise IAM for the DCSA program in a hybrid, telework-friendly role based near Quantico, VA. You will architect and implement Okta solutions, drive Zero Trust, and collaborate with stakeholders across the organization.

The ideal candidate has 10+ years in IAM, deep Okta expertise, and an active Secret clearance; TS/SCI eligibility is required. CISSP/CISM and Okta certs are highly desirable.

Qualifikationen

• 10+ years in Identity and Access Management (IAM)
• Active Secret Clearance REQUIRED; eligible for TS/SCI
• 8570 IAT II or higher at hire
• CISSP/CISM or equivalent preferred
• Okta certifications highly desired (Professional/Admin/Consultant)
• Bachelor's degree in cybersecurity/CS/IS management; master's preferred

Aufgaben

• Design enterprise-wide Okta IAM solutions aligned with security strategy and compliance
• Develop and maintain the Okta roadmap and security posture
• Lead architectural reviews and provide guidance on IAM initiatives
• Evaluate new Okta features and IAM tech for improvements
• Design disaster recovery and business continuity for Okta
• Lead complex Okta integrations with apps and cloud services
• Implement advanced authentication policies (adaptive MFA)
• Develop Okta Workflows for provisioning and lifecycle management
• Create integration APIs with Okta and secure API access
• Governance for Okta platform management and license optimization
• Provide technical leadership and mentorship to engineers
• Create and maintain architecture docs and runbooks
• Deliver training and enablement on Okta capabilities
• Vendor management and stakeholder communication
• Stay current with IAM trends and best practices

Kenntnisse

Okta IAM

Enterprise IAM

Security leadership

Architectural design

Ausbildung

Bachelor's Degree in Cybersecurity/CS/IS Management

Master's Degree preferred

Tools

Okta

APIs

CMDB

Jobbeschreibung

ASRC Federal is actively hiring a Senior Okta Architect/Engineer in support of our Defense Counterintelligence Security Agency (DCSA) program based out of Quantico, VA.

This is primarily a Telework position with a requirement to be onsite at least two (2) days a week or as needed at Quantico Marine Corps Base, VA.

Position Description:

We are seeking an exceptionally skilled and experienced Senior Okta Architect/Engineer to lead our enterprise Identity and Access Management (IAM) initiatives. The ideal candidate will serve as the technical authority for our Okta platform, responsible for enterprise-wide architecture, strategic planning, advanced implementation, and optimization of our Okta Identity and Access Management solutions. This senior-level role requires deep expertise in designing and implementing complex IAM architectures that ensure the confidentiality, integrity, and availability of our organization's data and systems across a large-scale, hybrid enterprise environment.

The Senior Okta Architect/Engineer will leverage the complete Okta ecosystem, including Advanced Single Sign-On (SSO), Adaptive Multi-Factor Authentication (MFA), Universal Directory, Advanced Lifecycle Management, API Access Management, and Okta Workflows to architect and enforce our Zero Trust security model. This role will also involve strategic planning, vendor engagement, and serving as the primary technical liaison between business stakeholders and technical teams.

Minimum Requirements:

• Experience: Minimum of 10 years of progressive experience in Identity and Access Management, with at least 5 years of hands-on experience architecting and implementing Okta solutions in large-scale enterprise environments (10,000+ users)
• Security Clearance: Active Secret Clearance REQUIRED, eligible to be upgraded to TS/SCI
• Certification Requirements:
  • Must meet 8570 certification requirements at the time of hire: IAT Level II or higher (e.g., Security+ CE, CCNA Security, CySA+, GICSP, GSEC, CISSP, CASP+, or higher tiered 8570 certification)
• Highly Desired:
  • CISSP, CISM, or equivalent advanced security certification
  • Okta certifications are highly desired, such as:
    • Okta Certified Professional
    • Okta Certified Administrator
    • Okta Certified Consultant.
• Education: Bachelor's Degree in Cybersecurity, Computer Science, Information Systems Management, or a related field; Master's Degree preferred. An equivalent combination of military service and/or at least ten (10) years of significant, relevant work experience may be considered in lieu of degree requirement.

Responsibilities:

• Design and architect enterprise-wide Okta IAM solutions that align with organizational security strategy, business objectives, and compliance requirements
• Develop and maintain the Okta platform roadmap, identifying opportunities for optimization, automation, and enhanced security
• Lead architectural reviews and provide technical guidance on complex IAM initiatives
• Evaluate emerging Okta features and IAM technologies to drive continuous improvement
• Design disaster recovery and business continuity strategies for the Okta platform

Advanced Implementation and Configuration:

• Lead the design and implementation of complex Okta integrations with enterprise applications, cloud services, and legacy systems
• Architect and implement advanced authentication policies, including adaptive MFA, risk-based authentication, and context-aware access controls
• Design and implement sophisticated Okta Workflows for automated provisioning, de-provisioning, and lifecycle management
• Develop custom integrations using Okta APIs, SDKs, and webhooks to meet unique business requirements
• Implement and optimize API Access Management for securing APIs and microservices

Platform Governance and Optimization:

• Establish and enforce governance frameworks for Okta platform management, including change control, configuration management, and security policies
• Conduct regular platform health assessments, performance tuning, and capacity planning
• Implement monitoring and alerting strategies to ensure platform availability and performance
• Lead security audits and compliance assessments of the Okta environment
• Optimize license utilization and manage vendor relationships

Technical Leadership and Collaboration:

• Serve as the primary technical authority and subject matter expert for all Okta-related initiatives
• Provide advanced troubleshooting and resolution for complex SSO, authentication, authorization, and lifecycle management issues
• Collaborate with enterprise architecture, security operations, network, application development, and business teams to ensure seamless IAM integration
• Lead cross-functional teams in the planning and execution of major IAM projects
• Mentor and provide technical guidance to junior Okta engineers and administrators

Documentation and Knowledge Management:

• Create and maintain comprehensive enterprise architecture documentation, including solution designs, integration patterns, runbooks, and standard operating procedures
• Develop technical standards and best practices for Okta implementation and management
• Create detailed technical specifications and design documents for complex integrations
• Maintain configuration management database (CMDB) entries for Okta components

Training and Enablement:

• Develop and deliver advanced training programs for IT staff and administrators on Okta capabilities and best practices
• Provide mentorship and career development guidance to junior team members
• Conduct knowledge transfer sessions and workshops for stakeholders
• Stay current with the latest Okta features, IAM trends, security best practices, and industry standards through continuous learning and professional development

Vendor and Stakeholder Management:

• Serve as the primary technical liaison with Okta support and professional services
• Participate in vendor roadmap discussions and provide feedback on product enhancements
• Present technical solutions and recommendations to senior leadership and business stakeholders
• Translate complex technical concepts into business value propositions

Work Environment and Physical Demands:

• This is primarily a Telework position with a requirement to be onsite up to two (2) days a week
• If alternate worksite is other than DCSA facilities or corporate office space, must have the reliable ability to communicate over voice (cell phone preferred) and stable, capable internet connection
• Must be able to communicate complex technical ideas to a diverse customer base both verbally and in written form