System Engineer II - Okta SME

The contractor will support OFR’s efforts to:

• Coordinate and/or perform additions and changes to operating systems and applications; includes investigation, analysis, recommendation, configuration, installation, and testing of new software and applications.
• Provide direct support in the day-to-day operations on operating systems and software, including the evaluation of system utilization, monitoring response time and primary support for detection and correction of operational problems.
• Will be responsible for securing user applications, application integrations, deployment automation, and improving security using Okta solutions. 
• Will play a crucial role in implementing Identity and Access Governance solutions, providing advanced authentication, overseeing privileged access management, and ensuring secure information distribution.
• Perform tasks including but not limited to User Lifecycle Management, security policy frameworks, and advanced directory integration for cloud and on-premises access.
• Use the Okta Policy framework to control user access, map identity attributes and data transformations using Universal Directory, and troubleshoot issues

Key Tasks & Responsibilities

• Experience with Okta includes installation, configuration, and migrations.
• Troubleshoot advanced problems within the Okta IdP by using tools such as SAML tracer, Fiddler, and other similar tools.
• Integrate applications with SAML, OpenID Connect, RADIUS and Oauth.
• Integrate applications with Multi Factor/Password less Authentication
• Provide Proof of Concepts and Pilots for Advancing Zero Trust integration infrastructure.
• Support of primarily Microsoft 365 stack (Exchange Online (hybrid), Intune, Entra ID, Teams, OneDrive)
• Systems Administration: Knowledge of Microsoft Windows Server Platforms, Active Directory, Group Policy as well as basic MS SQL administration.
• Ensure that all Group Policy Management (GPM) changes are controlled and documented.
• Measure and monitor metrics, identify trends, and report standings and findings to management and other stakeholders.
• Participating in meetings with executives to discuss technical issues and propose solutions.
• Collaborating with other members of the engineering team to design new features or improve existing ones.
• Escalate issues to vendor and third-party entities, as necessary.
• Other operational support duties as assigned.
• Experience leading engineering projects from start to finish.
• Provide support to technical leaders by coordinating activities pertaining to the development, documentation and maintenance associated with changes to the system.
• Ability to work and deliver on short response tasking in a fast paced environment.
• Ability to effectively manage several projects simultaneously while balancing resources
• Ability to work in a dynamic team environment, adaptable to change, and thrive in an atmosphere that requires trust, initiative, creativity, and strong problem-solving skills.
• Strong communication skills with customers over phone, email, or ticketing system.
• Ability to work well in a constantly evolving work environment.
• Excellent communication and organizational skills; able to articulate intent, frame requirements, set priorities, develop practical methods, and align resources to meet goals.

Education & Experience

• 10+ or more years of IT experience preferably in a Windows domain environment (hybrid)
• 5+ direct years of experience engineering and providing operations support for Okta SSO solution.
• Experience as a remote worker demonstrating time management and self-discipline with cultural change management and Agile mindset.
• Hands-on experience migrating applications to implement Okta.
• Strong knowledge of the different identity and access management (IAM) concepts, technologies and authentication protocols.
• Intimately familiar with IAM related protocols such as SAML, SPML, XACML, SCIM, OAuth, OIDC, OpenID and REST APIs, and other security interfaces.
• Strong experience with Directories, SSO, Federation, Delegated administration, API gateways, SOA services.
• An understanding of Zero Trust concepts.
• Active Directory including but not limited to:
  • Microsoft Active Directory/Azure Active Directory (EntraID)
  • Privileged access management (PAM) systems such as Beyond Trust
  • Hands-on experience with cloud computing services (O365/Microsoft Azure/AWS).
  • Experience with SailPoint IdentityIQ integration and operations.
  • Experience with network architecture.
  • Experience with Windows PowerShell scripting.

Certifications

• Okta Cer