Identity Engineer

Job Description

Our client is a leading global law firm with a strong focus on technology, innovation, and professional services operations and they are looking for an Identity Engineer to join their team supporting Okta and Entra. This role can sit remotely near an office location: Charlotte NC, Chicago IL, Dallas TX, Houston TX, Los Angeles CA, Miami FL, New York NY, San Francisco CA, Silicon Valley CA, Washington DC; as they ideally come in 2-3 days a week as needed. This role exists because of increased identity work related to a merger and a global expansion of Okta usage. This is a mid-level engineer focused on building, configuring, integrating, automating, and documenting identity solutions rather than day-to-day operational administration.

The Identity Engineer is responsible for the design, configuration, integration, automation, and continuous improvement of the firm's identity and access management environment, with a primary focus on Okta Workforce Identity Cloud, Okta Workflows, Okta Device Access, and Microsoft Entra ID. This role will support strategic identity initiatives associated with the firm's continued growth, technology modernization efforts, and enterprise integration projects.

The Identity Engineer will work hands-on to expand and enhance identity services through application integrations, workflow automation, authentication modernization, device-based access solutions, and identity lifecycle management processes. The role partners closely with Information Security, Endpoint Engineering, Collaboration Services, Infrastructure, and Application teams to implement scalable identity solutions that improve security, user experience, and operational efficiency. Success in this role requires strong engineering experience with Okta and Entra, a passion for automation, and the ability to independently drive technical solutions while collaborating across multiple technology groups.

DUTIES AND RESPONSIBILITIES

1. Administer, maintain, and troubleshoot Okta Workforce Identity Cloud, including user administration, group assignments, authentication policies, multifactor authentication, application integrations, and identity lifecycle processes.
2. Support the implementation and maintenance of Okta integrations, including single sign-on, provisioning, authentication policies, Universal Directory configurations, and related identity services.
3. Develop, maintain, test, and troubleshoot Okta Workflows used to automate identity lifecycle activities, access processes, user and group administration, notifications, and other repeatable identity operations.
4. Monitor and support existing Okta Workflows, including reviewing execution results, investigating failures, improving error handling, and maintaining accurate workflow documentation.
5. Review identity processes and Okta Workflows to identify practical opportunities to improve efficiency, reliability, supportability, and user experience.
6. Assist with the implementation, testing, deployment, and ongoing support of Okta Device Access, including device-based authentication, Desktop MFA, Okta Verify, and related device sign-in capabilities.
7. Collaborate with Endpoint Engineering and other technology teams to test, deploy, document, and troubleshoot Okta Device Access across supported devices.
8. Assist with defining and documenting enrollment, authentication, fallback, recovery, and support processes for Okta Device Access.
9. Support the administration and troubleshooting of Microsoft Entra ID, Active Directory, Active Roles, CyberArk, and other identity and access management technologies.
10. Support user identity lifecycle processes, including onboarding, transfers, role changes, account updates, access changes, and offboarding.
11. Investigate and resolve escalated identity, authentication, provisioning, and access issues while providing timely, professional, and customer-focused support.
12. Work closely with the Network Operations Center and other support teams to identify recurring incidents, improve troubleshooting procedures, and reduce repeat issues.
13. Collaborate with Information Risk and other technology teams to support identity-related security controls, policies, standards, and compliance requirements.
14. Participate in application onboarding and integration activities by gathering requirements, assisting with configuration and testing, documenting solutions, and supporting implementation.
15. Create, maintain, and improve technical documentation, including system documentation, standard operating procedures, configuration standards, process diagrams, support procedures, runbooks, and knowledge articles.
16. Create and maintain technical procedures, testing plans, recovery guidance, troubleshooting materials, and user-facing documentation for Okta, Okta Workflows, and Okta Device Access.
17. Assist with drafting, reviewing, and coordinating global communications related to authentication changes, platform updates, application migrations, service interruptions, maintenance activities, and identity-related initiatives.
18. Translate technical information into clear, concise guidance that can be understood by end users, business stakeholders, and global support teams.
19. Support phased testing and rollout activities for identity technologies, document the expected user experience, and help communicate enrollment requirements, authentication options, support procedures, and next steps to global audiences.
20. Support testing and validation of system changes, platform enhancements, new integrations, workflow updates, and process improvements.
21. Review existing identity processes and recommend practical improvements related to security, efficiency, automation, supportability, and user experience.
22. Assist with identity-related projects and operational initiatives while coordinating with stakeholders across teams, offices, and geographic regions.
23. Maintain current knowledge of Okta capabilities, identity management practices, authentication technologies, and relevant industry developments.
24. Participate in after-hours support, maintenance, or change activities as required.

COMPETENCIES

1. Working knowledge of Okta Workforce Identity Cloud, including user and group administration, Universal Directory, single sign-on, multifactor authentication, provisioning, authentication policies, and application integrations.
2. Working knowledge of Okta Workflows, including flow development, connectors, event-driven automation, testing, troubleshooting, error handling, and documentation.
3. Understanding of Okta Device Access concepts, including device-based authentication, Desktop MFA, Okta Verify, device enrollment, and alternative or recovery authentication methods.
4. Working knowledge of Microsoft Entra ID, Active Directory, and identity lifecycle management concepts.
5. Familiarity with identity management and privileged access technologies, such as Active Roles and CyberArk.
6. Understanding of authentication, authorization, access management, identity governance, and information security principles.
7. Ability to collaborate with Endpoint Engineering and other infrastructure teams to coordinate the testing, deployment, support, and documentation of identity capabilities that affect managed devices.
8. Strong technical troubleshooting and analytical skills, with the ability to investigate issues methodically and document findings clearly.

Compensation: $50/hr to $55/hr. Exact compensation may vary based on several factors, including location, skills, experience, and education. Employees in this role will enjoy a comprehensive benefits package starting on day one of employment, including options for medical, dental, and vision insurance. Eligibility to enroll in the 401(k) retirement plan begins after 90 days of employment. Additionally, employees in this role will have access to paid sick leave and other paid time off benefits as required under the applicable law of the worksite location.

Skills and Requirements

• 3+ years of experience supporting identity and access management technologies or related enterprise systems.
• 2+ years of hands-on experience administering or supporting Okta Workforce Identity Cloud, including application integrations, authentication policies, user lifecycle management, MFA, and group administration.
• Experience developing, maintaining, testing, or troubleshooting Okta Workflows or comparable identity automation solutions.
• Experience supporting Microsoft Entra ID, Active Directory, or comparable directory and identity platforms.
• Experience troubleshooting identity, authentication, provisioning, access, or application integration issues.
• Experience supporting Okta Device Access, Desktop MFA, device-based authentication, Okta Verify, or similar endpoint identity technologies is preferred.
• experience with Entra ID
• Experience creating technical documentation, operational procedures, knowledge articles, or user-facing support materials.
• Strong written communication skills, including the ability to assist with communications intended for a global audience.
• Familiarity with PowerShell, Python, APIs, or other workflow and process automation technologies is preferred.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [email protected].