Zero Trust Identity Engineer (Okta) — Hybrid and TS/SCI Eligible

Amatriot Group, LLC; Quantico (VA); Hybrid; USD 120,000 - 145,000; Full time

Job summary

Amatriot Group, LLC is hiring a Zero Trust Security Engineer – Okta to support its Defense Counterintelligence and Security Agency (DCSA) program in Quantico, VA 22134, USA. The role administers, configures, maintains, and integrates the Okta Identity Cloud platform to ensure secure access to DCSA applications and resources.

The position requires experience with SSO, MFA, LCM, and Okta Workflows, plus the ability to script in PowerShell or Python for IAM tasks and onboarding processes.

Qualifications

• Bachelor's degree or equivalent combination with 5+ years relevant work
• 5+ years hands-on Okta Identity Cloud administration
• Experience in federal or enterprise security environments
• Strong knowledge of SAML, OIDC, and OAuth 2.0
• IAT Level II or higher certification preferred

Responsibilities

• Platform Administration: manage, configure, and maintain Okta Identity Cloud daily operations
• Lifecycle: automated provisioning/deprovisioning and user lifecycles across apps
• Directory integration: AD/LDAP and cloud dirs; integrate SaaS apps via SAML/OIDC
• Security & Compliance: align with SIEM (Splunk) and Zero Trust policies
• Troubleshooting: Tier 2/3 support for Okta issues and auth failures
• Documentation: create SOPs, runbooks, and user guides

Skills

Identity security

Directory services

Active Directory

LDAP

SAML 2.0

OIDC

OAuth 2.0

Communication skills

Education

Bachelor’s degree in cybersecurity / information systems or related field

Tools

Okta Identity Cloud

PowerShell

Python

Job description

Amatriot Group, LLC is hiring a Zero Trust Security Engineer – Okta to support its Defense Counterintelligence and Security Agency (DCSA) program in Quantico, VA 22134, USA. The role administers, configures, maintains, and integrates the Okta Identity Cloud platform to ensure secure access to DCSA applications and resources.

The position requires experience with SSO, MFA, LCM, and Okta Workflows, plus the ability to script in PowerShell or Python for IAM tasks and onboarding processes.