Zero Trust Security Engineer - Okta

Amatriot Group; Quantico (VA); Hybrid; USD 120,000 - 145,000; Full time

Job summary

Amatriot Group in Quantico, VA is seeking a Zero Trust Security Engineer specializing in Okta to support the DCSA program. The role administers, configures, and integrates the Okta Identity Cloud to ensure secure access to DCSA applications and resources in a hybrid work environment.

You will implement SSO, MFA, lifecycle management, and workflows; integrate with AD/LDAP, HR systems, AWS, and Azure AD; collaborate with cybersecurity and SIEM teams; provide Tier 2/3 support, maintain runbooks,

Qualifications

• Bachelor's degree in Cybersecurity, Information Systems, or related field.
• Minimum of 5 years administering Okta in enterprise or federal environments.
• Strong knowledge of AD/LDAP and federation protocols (SAML 2.0, OIDC, OAuth 2.0).
• Excellent written and verbal communication skills.

Responsibilities

• Administer Okta Identity Cloud daily operations including Universal Directory, SSO, and MFA; design sign-on policies and lifecycle workflows.
• Integrate Okta with AD/LDAP, HR systems, and cloud environments; implement SAML/OIDC/WS-Fed/SCIM as needed.
• Collaborate with cybersecurity teams; align Okta policies with SIEM monitoring and Zero Trust requirements.
• Troubleshoot Okta issues across Tier 2/3 support; provide provisioning/deprovisioning assistance.
• Create and maintain runbooks, SOPs, diagrams, and provide training to junior staff.

Skills

Okta Identity Cloud

Active Directory

SAML 2.0 / OIDC / OAuth 2.0

MFA / SSO

Communication skills

Education

Bachelor's degree in Cybersecurity or related field

Tools

Okta Workflows

PowerShell

Python

SIEM (Splunk etc)

Job description

Location & Onsite Requirements

Quantico Va Hybrid 2 days onsite

Security Clearance

Active TS or higher Required

Job Type

Full Time

Target Salary Range

120000 145000

This represents the potential salary range for this position depending on education level years of experience andor certifications in addition to other position specific requirements which may impact salary

Position Overview

Amatriot is hiring a Zero Trust Security Engineer Okta to support its Defense Counterintelligence and Security Agency DCSA program in Quantico VA 22134 USA The role administers configures maintains and integrates the Okta Identity Cloud platform to ensure secure seamless and compliant access to DCSA applications and resources It uses Single Sign On SSO Multi Factor Authentication MFA Lifecycle Management LCM Universal Directory and Okta Workflows to support Zero Trust architecture and secure the hybrid workforce

Key Responsibilities

• Platform Administration and ConfigurationManage configure and maintain daily operations of Okta Identity Cloud including Universal Directory SSO and MFA Develop implement and enforce granular sign on policies adaptive MFA and application level access controlsLifecycle Management and AutomationDesign implement and troubleshoot automated provisioning deprovisioning and user lifecycle workflows across target applications Configure Okta Workflows or use scripting tools such as PowerShell and Python to automate manual IAM tasks and onboarding processes
• Directory and Application IntegrationIntegrate Okta with authoritative source directories including Active Directory LDAP and HR systems and cloud environments such as AWS and Azure AD Onboard and integrate SaaS web based and legacy on premises applications using SAML OIDC WS Fed and SCIM protocols
• Security and Compliance IntegrationCollaborate with cybersecurity teams to integrate Okta system logs with SIEM tools such as Splunk for security monitoring and audit reporting Support Zero Trust implementation by aligning Okta authentication policies with endpoint posture assessment tools including Palo Alto GlobalProtect and crowd sourced agents
• Troubleshooting and SupportServe as the Tier 2Tier 3 subject matter expert for Okta issues troubleshooting authentication failures provisioning errors federation mismatches and user access problems
• Documentation and TrainingCreate and maintain engineering runbooks standard operating procedures SOPs architecture diagrams and user guides Train and mentor junior support technicians and help desk staff on basic Okta troubleshooting and identity lifecycle actions

Qualifications

• EducationBachelors degree in Cybersecurity Information Systems Management or a related field or an equivalent combination of military service andor at least five 5 years of significant relevant work experience
• Required ExperienceMinimum of 5 years of hands on experience administering configuring and supporting Okta Identity Cloud in an enterprise or federal environment
• Required SkillsStrong understanding of identity centric security directory services such as Active Directory and LDAP and modern federation protocols including SAML 20 OIDC and OAuth 20
• Required Ability to communicate complex technical ideas to a diverse customer base verbally and in writing
• Required CertificationsMeet 8570 IAT Level II certification requirements at the time of hire such as Security CE CCNA Security CySA GICSP GSEC SCCP or a higher tier 8570 certification
• Required ClearanceActive Top Secret clearance and eligibility for an upgrade to TSSCI
• Required Working ConditionsPrimarily a telework position with a requirement to be onsite at least two 2 days a week or as needed at Quantico Marine Corps Base VA Additional onsite time may be required during initial onboarding and program integration
• Required If the alternate worksite is outside DCSA facilities or corporate office space reliable voice communication capability and a stable capable internet connection are required
• Preferred QualificationsCertificationsOfficial Okta certifications are highly desired Okta Certified Professional Okta Certified Administrator Okta Certified Consultant or Okta Certified Developer
• Alternate Worksite CommunicationCell phone for voice communication when working outside DCSA facilities or corporate office space