About this role
Experience: 5 - 7 years
Job Description:
• Minimum 5+ years of professional experience in Identity and Access Management (IAM).
• Minimum 4+ years of hands-on experience with Okta, including implementation, configuration, integration, and support.
• Minimum 2+ years of development or scripting experience using Java, JavaScript, Node.js, Python, PowerShell, or similar technologies.
• Experience managing Okta implementations across the complete SDLC, including requirements gathering, solution design, configuration, testing, deployment, and production support.
• Experience working in client-facing environments and participating in technical design and architecture discussions.
Okta / IAM Technical Skills:
• Strong hands-on experience with Okta Identity Engine, Universal Directory, Lifecycle Management, SSO, MFA, and API Access Management.
• Good understanding of IAM concepts including Authentication, Authorization, Federation, Provisioning, Reconciliation, RBAC, and Directory Services.
• Strong knowledge of SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), SCIM, and Just-in-Time (JIT) provisioning.
• Experience configuring Okta applications, authentication policies, sign-on policies, MFA, password policies, groups, group rules, and profile mappings.
• Experience implementing SSO integrations with SaaS, custom, and enterprise applications using SAML and OIDC.
• Hands-on experience with Okta Lifecycle Management, including user provisioning, deprovisioning, attribute mapping, and Joiner-Mover-Leaver processes.
• Experience integrating Okta with Active Directory, LDAP, HR systems, SaaS applications, and custom applications.
• Experience configuring authorization servers, scopes, claims, access policies, and OAuth2/OIDC flows , using Okta API Access Management.
• Experience using Okta REST APIs for user, group, application, and identity lifecycle operations.
• Knowledge of Okta Workflows, Event Hooks, Inline Hooks, and custom integrations is preferred.
• Experience with Okta Access Gateway for integrating legacy or on-premises applications is desirable.
• Experience troubleshooting authentication, federation, provisioning, directory synchronization, and application access issues.
• Good understanding of SSL/TLS, certificates, PKI, DNS, HTTP/HTTPS, reverse proxy, and load-balancing concepts.
Development & Tools:
• Experience with Java, JavaScript, Python, PowerShell, Node.js, or similar programming/scripting languages.
• Familiarity with REST APIs, JSON, web services, and API-based integrations.
• Experience with Git, Jira, CI/CD, Agile, and software development lifecycle practices.
• Knowledge of tools such as SonarQube, OpenSSL, and Keytool is preferred.
• Ability to design secure, scalable, and highly available Okta solutions based on business and technical requirements.
Preferred Qualifications:
• Relevant Okta certification is preferred.
• Experience integrating Okta with multiple enterprise applications and identity sources.
• Knowledge of Zero Trust, passwordless authentication, FIDO2/WebAuthn, and modern identity security practices is a plus.
People Skills:
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent written and verbal communication skills.
• Ability to communicate directly with clients through meetings, workshops, and email.
• Ability to translate business requirements into technical IAM solutions.
• Experience leading or mentoring team members and coordinating with application, security, and infrastructure teams.
Mandatory Skill: Okta Identity Engine, Universal Directory, Lifecycle Management, SSO, MFA, and API Access Management., SAML 2.0, OAuth 2.0, Okta API’s, SDLC, Java, Rest Api, JavaScript.
Tired of cold applications?
Sign up with Clera and we'll reach out the moment a role actually fits you — no more spraying applications into the void.
Know someone who'd be great for this?