Senior Specialist - Architecture

Role description
Okta Engineer

Role Summary

We are seeking an experienced Okta Engineer to design implement and operate Identity and Access Management IAM capabilities using Okta across applications and services hosted on Google Cloud Platform GCP. The ideal candidate will work in an Agile ScrumKanban environment partnering with product owners security platform engineering and application teams to deliver secure authentication authorization SSO and lifecycle management solutions.

This role requires handson expertise in Okta integrations identity standards SAML OIDC OAuth2 directory services automation Terraform CI/CD and cloud security controls with a strong emphasis on delivering iterative value in sprint cycles.

Key Responsibilities

Okta Solution Engineering Delivery Core.

Design and implement SSO integrations using SAML 20 OIDC and OAuth 2.0 for internal and external applications.

Configure and manage Okta Universal Directory groups group rules profile mappings and attribute transformations.

Implement MFA policies adaptive authentication device context controls and stepup authentication patterns.

Create and manage Okta Applications Authorization Servers ScopesClaims and secure token lifetimes.

Implement Okta Lifecycle Management LCM flows for joinermoverleaver automation.

GCP Integration Cloud IAM Alignment.

Enable secure identity patterns for workloads on GCP app hosting APIs container platforms serverless.

Integrate Okta with cloud and platform services where applicable eg federated access patterns centralized identity.

Partner with cloudplatform teams to ensure identity controls align with GCP IAM least privilege and audit requirements.

Support identity patterns for microservices and APIs deployed on GCP token validation audienceissuer controls JWKS rotation practices.

Automation Infrastructureas Code CICD.

Automate Okta configuration using.

Terraform Okta provider configuration as code practices.

Okta APIs SDKs and scripting Python PowerShell Bash.

Build and maintain CICD pipelines eg GitHub ActionsJenkinsAzure DevOps for Policy config deployment, Integration tests, Environment promotion DEV QA PROD, Maintain reusable modules for consistent provisioning and secure baselines.

Agile Delivery Collaboration Work as part of a ScrumKanban team delivering features in sprints.

.Create estimate stories define acceptance criteria

Participate in sprint planning daily standups reviews retrospectives.

Collaborate with Product Owners Architects Developers Security GRC and Support teams.

Produce technical documentation runbooks and operational playbooks for delivered features.

Security Compliance Operational Excellence.

Implement and enforce security controls for authentication and access policies.

Monitor and respond to identityrelated incidents perform root cause analysis and implement preventative measures.

Ensure logging auditing and ing are configured for Okta events and integrated with enterprise SIEM eg Splunk Chronicle.

Support periodic access reviews compliance evidence and audit queries.

Required Skills Qualifications

Must Have Technical Skills

3-7 years in IAM SSO Identity Engineering depending on level.

Strong handson experience with Okta including.

SSO integrations SAM LOIDC.

MFA and signon policies.

Universal Directory and group managemen

API Access Management preferre.

Strong understanding of identity protocols.

SAML 20 OIDC OAuth 20 JWT SCIM LDAP.

Experience working with GCP environments and cloud security concepts.

Automation mindset.

Terraform and or scripting with APIs.

CI/CD pipelines and Gitbased workflows.

Troubleshooting expertise.

Token claims audienceissuer mismatches.

SAML assertions certificates metadata issue.

SCIM provisioning failures attribute mapping issues.

Agile Delivery Skills

Experience working in Agile teams with sprintbased delivery.

Ability to break down epics into user stories and deliver iteratively.

Strong communication skills to work across engineering security and business stakeholders.

Preferred Qualifications.

Okta certifications any of the following are a plus.

Okta Certified Professional Administrator Consultant Developer.

Experience with

Beyond Corp Zero Trust patterns.

Enterprise directory integrations ADLDAPHR systems.

SIEM integrations and security operations.

API gateway patterns and servicetoservice auth considerations.

Familiarity with GCP services commonly used in modern stacks.

Cloud Run GKE API GatewayApigee Cloud Functions Cloud Load Balancing.

Typical Deliverables

Okta application integrations SAMLOIDC with documented configuration.

Other details
Actual compensation within the range will be dependent upon the individual's skills, experience, performance and internal equity.

Benefits/perks listed below may vary depending on the nature of your employment with LTIMindtree (“LTIM”):

Benefits and Perks:

Comprehensive Medical Plan Covering Medical, Dental, Vision
Short Term and Long-Term Disability Coverage
401(k) Plan with Company match
Life Insurance
Vacation Time, Sick Leave, Paid Holidays
Paid Paternity and Maternity Leave

The range displayed on each job posting reflects the minimum and maximum salary target for the position across all US locations. Within the range, individual pay is determined by work location and job level and additional factors including job-related skills, experience, and relevant education or training. Depending on the position offered, other forms of compensation may be provided as part of overall compensation like an annual performance-based bonus, sales incentive pay and other forms of bonus or variable compensation.

Disclaimer: The compensation and benefits information provided herein is accurate as of the date of
this posting.

LTIMindtree is an equal opportunity employer that is committed to diversity in the workplace. Our
employment decisions are made without regard to race, color, creed, religion, sex (including
pregnancy, childbirth or related medical conditions), gender identity or expression, national origin,
ancestry, age, family-care status, veteran status, marital status, civil union status, domestic
partnership status, military service, handicap or disability or history of handicap or disability, genetic
information, atypical hereditary cellular or blood trait, union affiliation, affectional or sexual orientation
or preference, or any other characteristic protected by applicable federal, state, or local law, except
where such considerations are bona fide occupational qualifications permitted by law.