System Engineer II - Okta SME

The contractor will support OFR's efforts to:

• Coordinate and/or perform additions and changes to operating systems and applications; includes investigation, analysis, recommendation, configuration, installation, and testing of new software and applications.
• Provide direct support in the day-to-day operations on operating systems and software, including the evaluation of system utilization, monitoring response time and primary support for detection and correction of operational problems.
• Will be responsible for securing user applications, application integrations, deployment automation, and improving security using Okta solutions.
• Will play a crucial role in implementing Identity and Access Governance solutions, providing advanced authentication, overseeing privileged access management, and ensuring secure information distribution.
• Perform tasks including but not limited to User Lifecycle Management, security policy frameworks, and advanced directory integration for cloud and on-premises access.
• Use the Okta Policy framework to control user access, map identity attributes and data transformations using Universal Directory, and troubleshoot issues

Key Tasks & Responsibilities

• Experience with Okta includes installation, configuration, and migrations.
• Troubleshoot advanced problems within the Okta IdP by using tools such as SAML tracer, Fiddler, and other similar tools.
• Integrate applications with SAML, OpenID Connect, RADIUS and Oauth.
• Integrate applications with Multi Factor/Password less Authentication
• Provide Proof of Concepts and Pilots for Advancing Zero Trust integration infrastructure.
• Support of primarily Microsoft 365 stack (Exchange Online (hybrid), Intune, Entra ID, Teams, OneDrive)
• Systems Administration: Knowledge of Microsoft Windows Server Platforms, Active Directory, Group Policy as well as basic MS SQL administration.
• Ensure that all Group Policy Management (GPM) changes are controlled and documented.
• Measure and monitor metrics, identify trends, and report standings and findings to management and other stakeholders.
• Participating in meetings with executives to discuss technical issues and propose solutions.
• Collaborating with other members of the engineering team to design new features or improve existing ones.
• Escalate issues to vendor and third-party entities, as necessary.
• Other operational support duties as assigned.
• Experience leading engineering projects from start to finish.
• Provide support to technical leaders by coordinating activities pertaining to the development, documentation and maintenance associated with changes to the system.
• Ability to work and deliver on short response tasking in a fast paced environment.
• Ability to effectively manage several projects simultaneously while balancing resources
• Ability to work in a dynamic team environment, adaptable to change, and thrive in an atmosphere that requires trust, initiative, creativity, and strong problem-solving skills.
• Strong communication skills with customers over phone, email, or ticketing system.
• Ability to work well in a constantly evolving work environment.
• Excellent communication and organizational skills; able to articulate intent, frame requirements, set priorities, develop practical methods, and align resources to meet goals.

Education & Experience

• 10+ or more years of IT experience preferably in a Windows domain environment (hybrid)
• 5+ direct years of experience engineering and providing operations support for Okta SSO solution.
• Experience as a remote worker demonstrating time management and self-discipline with cultural change management and Agile mindset.
• Hands-on experience migrating applications to implement Okta.
• Strong knowledge of the different identity and access management (IAM) concepts, technologies and authentication protocols.
• Intimately familiar with IAM related protocols such as SAML, SPML, XACML, SCIM, OAuth, OIDC, OpenID and REST APIs, and other security interfaces.
• Strong experience with Directories, SSO, Federation, Delegated administration, API gateways, SOA services.
• An understanding of Zero Trust concepts.
• Active Directory including but not limited to:
  • Microsoft Active Directory/Azure Active Directory (EntraID)
  • Privileged access management (PAM) systems such as Beyond Trust
  • Hands-on experience with cloud computing services (O365/Microsoft Azure/AWS).
  • Experience with SailPoint IdentityIQ integration and operations.
  • Experience with network architecture.
  • Experience with Windows PowerShell scripting.

Certifications

• Okta Certified

Security Clearance

• Public Trust High (Tier 4/BI) Risk Level
• Must be a US citizen

Other

• Remote or DC

$145,000 - $155,000 a year

Computer World Services is an affirmative action and equal employment opportunity employer. Current employees and/or qualified applicants will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, disability, protected veteran status, genetic information or any other characteristic protected by local, state, or federal laws, rules, or regulations.

Computer World Services is committed to the full inclusion of all qualified individuals. As part of this commitment, Computer World Services will ensure that individuals with disabilities (IWD) are provided reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact Human Resources at [email protected] .

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.