Zero Trust Security Engineer, Okta - Quantico, VA (Hybrid) - Top Secret Clearance Information Technology

SOC LLC; Quantico (VA); Hybrid; USD 63,000 - 90,000; Full time

Job summary

SOC LLC is seeking a Senior Okta Engineer in Quantico, VA, requiring an active Top Secret clearance and 5+ years of hands-on experience with Okta Identity Cloud. This hybrid role supports a federal client and requires strong IAM expertise and governance.

The position is contract-to-hire, offering federal compliance work, and opportunities to lead complex authentication and federation initiatives within a Zero Trust framework.

Qualifications

• Active Top Secret clearance required.
• 5+ years hands-on Okta admin experience in enterprise or federal env.
• Strong understanding of identity security and federation protocols (SAML/OIDC).
• 8570 certification requirements at hire, Security+ CE or equivalent.

Responsibilities

• Manage, configure, and maintain the Okta Identity Cloud platform (SSO, MFA, Universal Directory).
• Develop and enforce granular sign-on policies and adaptive MFA.
• Design and troubleshoot provisioning and lifecycle workflows across apps.
• Automate IAM tasks using Okta Workflows, PowerShell, or Python.
• Integrate Okta with AD/LDAP/HR sources and cloud environments (AWS, Azure).
• Onboard and integrate SaaS, web, and on-prem apps using SAML, OIDC, WS-Fed, SCIM.

Skills

Identity and access management

Zero Trust architecture

SAML/OIDC/OAuth

Team mentoring

Security compliance

Education

Bachelor's Degree in Cybersecurity/Information Systems Management

8570 certification (e.g., Security+ CE)

Tools

Okta Identity Cloud

PowerShell

Python

Active Directory

LDAP

AWS

Azure AD

Splunk SIEM

Job description

Senior Okta Engineer with active Top Secret clearance needed for a Contract to Hire opportunity with SOC's direct client for a Hybrid role based in Quantico, VA.

Due to federal requirements, candidates must hold an Active Top Secret Clearance to be considered for this role.

The successful Okta Engineer will be responsible for the administration, configuration, maintenance, and integration of our Okta Identity Cloud platform, ensuring secure, seamless, and compliant access to DCSA applications and resources. This role will focus on leveraging Okta's core features, including Single Sign-On (SSO), Multi-Factor Authentication (MFA), Lifecycle Management (LCM), Universal Directory, and Okta Workflows to support our Zero Trust architecture and secure our hybrid workforce.

Job Responsibilities:

• Manage, configure, and maintain the daily operations of the Okta Identity Cloud platform, including Universal Directory, Single Sign-On (SSO), and Multi-Factor Authentication (MFA).
• Develop, implement, and enforce granular sign-on policies, adaptive MFA, and application-level access controls.
• Design, implement, and troubleshoot automated provisioning, deprovisioning, and user lifecycle workflows (Lifecycle Management) across various target applications.
• Utilize and configure Okta Workflows or scripting (e.g., PowerShell, Python) to automate manual IAM tasks and onboarding processes.
• Connect and integrate Okta with authoritative source directories (Active Directory, LDAP, HR systems) and cloud environments (AWS, Azure AD).
• Onboard and integrate SaaS, web-based, and legacy on-premise applications using SAML, OIDC, WS-Fed, and SCIM protocols.
• Collaborate with cybersecurity teams to integrate Okta system logs with Security Information and Event Management (SIEM) tools (e.g., Splunk) for security monitoring and audit reporting.
• Support the implementation of Zero Trust architecture by aligning Okta authentication policies with endpoint posture assessment tools (e.g., Palo Alto GlobalProtect, crowd-sourced agents).
• Serve as the Tier-2/Tier-3 Subject Matter Expert (SME) for Okta-related issues, troubleshooting authentication failures, provisioning errors, federation mismatches, and user access issues.
• Create and update high-quality engineering runbooks, standard operating procedures (SOPs), architecture diagrams, and user guides.
• Train and mentor junior support technicians and help desk staff on basic Okta troubleshooting and identity lifecycle actions.

Job Requirements:

• Active DoW Top Secret Security Clearance
• Minimum of 5 years of hands-on experience administering, configuring, and supporting the Okta Identity Cloud platform in an enterprise or federal environment.
• IAM Expertise: Strong understanding of identity-centric security, directory services (Active Directory, LDAP), and modern federation protocols (SAML 2.0, OIDC, OAuth 2.0).
• Active Top-Secret Clearance REQUIRED, eligible to be upgraded to TS/SCI
• Must meet 8570 certification requirements at the time of hire. IAT Level II (Security+ CE, CCNA Security, CySA+, GICSP, GSEC, SCCP or higher tiered 8570 certification)
• Bachelor's Degree, in Cybersecurity, Information Systems Management or a related field or an equivalent combination of military service and/or at least five (5) years of significant, relevant work experience
• Official Okta certifications are highly desired: Okta Certified Professional , Okta Certified Administrator, Okta Certified Consultant or Okta Certified Developer (plus)

Employment Prerequisites

The following requirements must be met to be eligible for this position: successful completion of a background investigation and drug urinalysis.

SOC, a Day & Zimmermann company, is an Equal Opportunity Employer, EOE AA M/F/Vet/Disability.

Note: Any pay ranges displayed are estimations, which may have been provided by job boards. Actual pay is determined by an applicant's experience, technical expertise, and other qualifications as listed in the job description. All qualified applicants are welcome to apply.

Estimated Min Rate: $45.50

Estimated Max Rate: $65.00