Senior Okta Platform/IAM Engineer

Senior Okta Platform/IAM Engineer

Client: Vanguard
Location: Malvern, PA
Work Model: Hybrid – On-site Tuesday, Wednesday, and Thursday
Pay Rate: $59/hour C2C Maxx
Work Authorization: USC/GC only

Candidate Submission Requirements

LinkedIn Profile: Required
Candidate Write-Up: 4–5 sentences explaining how the candidate fits the opportunity
Full Legal Name: Must be included on the resume
Education: Include graduation month and year
Visa Status: U.S. Citizen (USC) or Green Card (GC) only
Key Requirements

Hands-on experience integrating Okta with MDM platforms such as Microsoft Intune, VMware Workspace ONE, and AirWatch, specifically for Mobile Keys/Credentials and Device Trust.
Deep expertise in passwordless authentication, FIDO2/WebAuthn, Device Assurance, Device Trust, and Device-Bound Single Sign-On (SSO).
Strong proficiency in REST APIs and PowerShell or Python for automated provisioning and platform workflows.
Hands-on experience using Splunk for log analysis, troubleshooting, and security monitoring.
Published Summary

The Senior Okta Platform Engineer will design, engineer, configure, and maintain enterprise identity solutions, with a focus on secure authentication, device trust, automation, platform reliability, and security engineering.

Key Responsibilities

1. Platform Architecture & Engineering

Design, engineer, configure, and maintain Okta Workforce Identity solutions and platform capabilities.
Develop scalable SSO, federation, MFA, passwordless authentication, authorization, and identity lifecycle solutions.
Integrate enterprise applications using SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), SCIM, REST APIs, and federation technologies.
Define reusable engineering patterns, technical standards, and secure configuration baselines for identity services.
2. Passwordless, User & Device Authentication

Engineer Okta FastPass, Device Trust, Device-Bound SSO, FIDO2, and device-based authentication capabilities.
Design secure authentication experiences across desktop, mobile, remote-access, and shared-device use cases.
Implement privileged-access, step-up authentication, and authentication assurance controls while improving the user experience.
3. Automation, Integration & Delivery

Develop automation and tooling using Okta APIs, Workflows, Python, PowerShell, JavaScript, Terraform, GitHub, and CI/CD practices.
Support application onboarding, identity lifecycle integration, platform enhancements, testing, rollout planning, production releases, and post-deployment validation.
Troubleshoot complex authentication, federation, provisioning, device-context, and application-integration issues.
Create implementation documentation, technical designs, test plans, operational procedures, and knowledge articles.
4. Reliability, Operations & Lifecycle Management

Ensure platform availability, resiliency, security, performance, and operational readiness.
Maintain monitoring, alerting, dashboards, log analysis, and observability using tools such as Splunk or Elastic.
Provide production support and participate in incident response, problem management, root cause analysis, and continuous improvement.
Plan and execute platform upgrades, feature adoption, change management, and production validation.
Conduct disaster recovery, failover, contingency, and resiliency testing; maintain runbooks and support documentation.
5. Security & Compliance Engineering

Remediate vulnerabilities, security findings, configuration risks, and identity-related control gaps.
Partner with cybersecurity teams on identity threat mitigation, privileged-access controls, and security-hardening initiatives.