OKTA Architect

Job Description

In this role, you will serve as the organization's lead Subject Matter Expert and architect for Okta and Identity & Access Management solutions. You will be responsible for designing, implementing, and governing enterprise identity architecture while ensuring alignment with security requirements, Zero Trust principles, and CMMC compliance standards. The ideal candidate will partner closely with IAM Engineering, Cybersecurity, Cloud Operations, and Infrastructure teams to build secure, scalable, and automated identity solutions.

The Okta SME/Architect will oversee application onboarding, federation services, lifecycle management, MFA policies, access governance, and SCIM provisioning across Okta, Active Directory, and Microsoft Entra ID environments. A significant portion of the role will focus on developing PowerShell-based automation for identity provisioning, compliance reporting, auditing, and entitlement management. This individual will establish IAM standards, create architectural documentation and workflows, lead troubleshooting and root cause analysis for identity-related incidents, and serve as the technical authority for identity strategy and governance across the enterprise.

Additional responsibilities include managing IAM-related vendors, supporting change management initiatives, defining configuration standards, leading systems analysis and design efforts for new IAM capabilities, and ensuring reliable, secure identity services that provide a seamless end-user experience across the organization.

Skills and Requirements

• 7+ years in a System Administrator or IAM engineering role with hands‑on technical responsibilities
• 5+ years focused on Identity & Access Management, including SSO, SAML, and federation technologies
• Deep expertise administering and architecting solutions in Okta (Universal Directory, OIDC/SAML integrations, Workflows, Lifecycle Management, MFA, policies)
• Strong experience in Windows environments and Active Directory
• PowerShell for automating IAM tasks such as provisioning, deprovisioning, entitlement management, and auditing
• Experience managing and configuring Azure AD / Microsoft Entra ID
• Must be able to work onsite in Herndon, VA 3x per week
• Experience supporting CMMC compliance initiatives.
• Experience implementing SCIM provisioning and automated identity lifecycle workflows.
• Background in cybersecurity, cloud operations, or enterprise architecture environments.
• Experience working within regulated or government-focused organizations.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [email protected].