Zero Trust IAM Engineer (Okta Specialist)

Colonial Group; Quantico (VA); Hybrid; USD 120,000 - 150,000; Full time

Job summary

ASRC Federal seeks an Intermediate Okta Engineer to support the DCSA program in Quantico, VA. You will administer the Okta Identity Cloud, including SSO, MFA, Universal Directory, and Workflows, aligned with Zero Trust.

Onsite required two days weekly; mostly telework. You will implement provisioning lifecycles, integrate with AD/LDAP and cloud services, and collaborate on SIEM integration to strengthen security.

Qualifications

• Minimum of 5 years hands-on experience administering Okta Identity Cloud in an enterprise or federal environment.
• IAM expertise with identity-centric security, directory services (AD, LDAP), and federation protocols (SAML 2.0, OIDC, OAuth 2.0).
• Active Top-Secret Clearance REQUIRED, eligible to upgrade to TS/SCI.
• Bachelor’s Degree or equivalent experience in Cybersecurity or related field.

Responsibilities

• Manage, configure, and maintain daily operations of the Okta Identity Cloud, including Universal Directory, SSO, and MFA.
• Develop, implement, and enforce granular sign-on policies and adaptive MFA.
• Design, implement, and troubleshoot automated provisioning and lifecycle workflows.
• Utilize Okta Workflows or scripting to automate IAM tasks and onboarding processes.
• Connect Okta with AD/LDAP, HR systems, and cloud environments (AWS, Azure AD).
• Integrate SaaS/web/legacy apps using SAML, OIDC, WS-Fed, SCIM.
• Collaborate with cybersecurity teams to integrate Okta logs with SIEM (e.g., Splunk).
• Support Zero Trust architecture by aligning policies with endpoint posture tools.
• Serve as Tier-2/3 SME for Okta issues; create runbooks and SOPs.

Skills

Okta Identity Cloud

SAML 2.0

OIDC

OAuth 2.0

Active Directory

LDAP

Zero Trust

TS/SCI clearance

Education

Bachelor's Degree

Tools

Okta Workflows

PowerShell

Python

SAML/WS-Fed

Job description

ASRC Federal seeks an Intermediate Okta Engineer to support the DCSA program in Quantico, VA. You will administer the Okta Identity Cloud, including SSO, MFA, Universal Directory, and Workflows, aligned with Zero Trust.

Onsite required two days weekly; mostly telework. You will implement provisioning lifecycles, integrate with AD/LDAP and cloud services, and collaborate on SIEM integration to strengthen security.