[Remote] Okta SME

Note: The job is a remote job and is open to candidates in USA. Koniag IT Systems (KITS), a Koniag Government Services company, is seeking an experienced Okta Subject Matter Expert (SME) to lead and support Identity, Credential, and Access Management (ICAM) initiatives leveraging the Okta platform for government customers. The Okta SME will be responsible for the strategy, design, implementation, integration, and management of Okta-based identity and access management solutions.

Responsibilities

• Serve as the primary technical subject matter expert for the Okta platform, providing authoritative guidance on architecture, design, configuration, and implementation decisions across the enterprise
• Lead the end-to-end design, configuration, and deployment of Okta solutions including Single Sign-On (SSO), Multi-Factor Authentication (MFA), Lifecycle Management, Universal Directory, API Access Management, and Okta Workflows
• Drive the development and execution of Okta platform strategy, roadmaps, and governance frameworks in alignment with federal ICAM policies and customer mission objectives
• Oversee the integration of Okta with enterprise applications, cloud services, and on-premises systems using SAML, OAuth2, OpenID Connect (OIDC), and SCIM protocols
• Perform and oversee day-to-day administration and maintenance of the Okta platform, including user provisioning, application integrations, group management, and security policy configurations
• Lead the development and implementation of Okta Workflows and automation solutions to streamline and optimize identity lifecycle management processes
• Support the integration of Okta with directory services such as Microsoft Active Directory and Azure Active Directory, ensuring seamless synchronization and authentication
• Serve as the escalation point for complex Okta platform issues, conducting thorough root cause analysis and implementing corrective and preventive actions
• Ensure all Okta configurations, integrations, and deployments comply with applicable federal security standards including NIST SP 800-63, FISMA, FedRAMP, and Zero Trust Architecture principles
• Monitor Okta system performance, audit logs, and access reports to proactively identify anomalies, compliance gaps, and potential security threats
• Lead and contribute to Authority to Operate (ATO) processes and security assessments related to Okta platform components, including development of System Security Plans (SSPs)
• Develop and maintain comprehensive technical documentation including architecture designs, integration specifications, runbooks, and standard operating procedures
• Provide technical leadership, mentorship, and knowledge transfer to junior engineers, administrators, and government stakeholders on Okta capabilities, best practices, and emerging identity trends
• Engage with Okta product teams and stay current with platform updates, new features, and evolving federal ICAM policy requirements to continuously improve the identity program
• Collaborate with program managers and government stakeholders to communicate Okta program status, risks, and recommendations to senior leadership

Skills

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field from an accredited college or university
• 7+ years of experience in Identity and Access Management (IAM) or related cybersecurity disciplines
• 5+ years of hands-on experience designing, deploying, and administering Okta solutions in a large-scale enterprise environment
• Active Secret Clearance required
• Okta Certified Professional, Okta Certified Administrator, or Okta Certified Consultant certification
• Exceptional communication skills in English – both written and oral – with the ability to effectively communicate complex technical concepts to both technical and non-technical stakeholders, including senior government officials
• Deep hands-on expertise with Okta platform components including SSO, MFA, Universal Directory, Lifecycle Management, API Access Management, and Okta Workflows
• Strong proficiency in identity federation and provisioning protocols including SAML 2.0, OAuth2, OpenID Connect (OIDC), and SCIM
• Extensive experience integrating Okta with Microsoft Active Directory and/or Azure Active Directory in complex enterprise environments
• Deep understanding of identity lifecycle management concepts including provisioning, de-provisioning, joiner/mover/leaver processes, and Role-Based Access Control (RBAC)
• Comprehensive working knowledge of federal ICAM frameworks including FICAM, NIST SP 800-63, and OMB identity-related memoranda
• Strong understanding of Zero Trust Architecture principles and their practical application to enterprise identity and access management programs
• Extensive experience with Okta Workflows and other automation toolsets for identity process automation and optimization
• Demonstrated ability to troubleshoot and resolve complex identity and access management issues across diverse integrated systems and applications
• Strong understanding of cybersecurity frameworks including NIST SP 800-53, FISMA, and FedRAMP compliance requirements
• Experience supporting Authority to Operate (ATO) processes and contributing to System Security Plans (SSPs) and related security documentation
• Proven ability to develop and maintain comprehensive technical documentation including architecture diagrams, integration guides, and operational runbooks
• Demonstrated ability to provide technical leadership and mentorship in a team environment while effectively managing multiple priorities in a fast-paced, deadline-driven setting
• Active Secret Clearance
• Okta Certified Developer certification
• Experience working in a federal government or Department of Defense (DoD) IT environment
• Experience with SailPoint IdentityIQ or IdentityNow and integration with Okta for comprehensive identity governance
• Familiarity with Privileged Access Management (PAM) tools such as CyberArk or BeyondTrust and their integration with Okta
• Experience with cloud platforms such as Microsoft Azure, AWS, or Google Cloud and their native identity services
• Knowledge of PIV/CAC credentialing and smart card authentication in federal environments
• Experience supporting FedRAMP authorization processes and contributing to continuous monitoring activities
• Familiarity with DevSecOps practices and CI/CD pipeline integration with identity and access management services
• Experience with Agile Development Methodology and Scrum frameworks
• Certified Information Systems Security Professional (CISSP) or CompTIA Security+

Benefits

• Health, dental and vision insurance
• 401K with company matching
• Flexible spending accounts
• Paid holidays
• Three weeks paid time off
• More

Company Overview