About the company
Our partner is looking for an OKTA- IAM Engineer based in United States. The IAM Engineer will help design, administer, and optimize secure identity and access solutions across a complex healthcare technology environment.
Responsibilities
- Configure, maintain, and troubleshoot Okta Identity Cloud and CyberArk PAM solutions across the enterprise.
- Implement and support SSO, MFA, passwordless authentication, authentication policies, access controls, device assurance, and other identity security capabilities.
- Configure and troubleshoot integrations using SAML, OAuth, OIDC, SCIM, APIs, and other modern identity standards.
- Investigate and resolve authentication, federation, provisioning, application-access, and directory-synchronization issues.
- Develop and maintain automation scripts and workflows supporting identity lifecycle processes, including provisioning, deprovisioning, and access reviews.
- Integrate IAM platforms with enterprise applications and directory services such as Active Directory.
- Partner with HR, IT, compliance, and other teams to streamline access processes and enforce least-privilege principles.
- Monitor and respond to IAM incidents, security alerts, and audit findings.
- Support the design and implementation of IAM policies, standards, and controls aligned with HIPAA, HITECH, and NIST frameworks.
- Identify opportunities to improve identity-service security, adoption, operational efficiency, supportability, and overall user experience.
- Help develop self-service access capabilities and user-friendly access-request workflows.
- Maintain accurate technical documentation covering IAM configurations, procedures, standards, and operational processes.
- Stay current with emerging IAM technologies, security threats, industry practices, and evolving identity-security requirements.
Requirements
- 3+ years of hands-on experience in IAM engineering or a similar IT/security role.
- Strong practical expertise with Okta, including SSO, MFA, and Lifecycle Management.
- Hands-on experience with CyberArk, particularly PAM, PSM, and CPM capabilities.
- Strong scripting and automation skills using PowerShell, Python, or comparable technologies.
- Experience with identity governance, role-based access control (RBAC), and directory services such as Active Directory, Entra ID, and Okta.
- Familiarity with healthcare IT environments and regulatory requirements, particularly HIPAA and HITECH.
- Understanding of modern identity protocols and technologies, including SAML, OAuth, OIDC, SCIM, and APIs.
- Strong analytical and troubleshooting abilities, with the ability to investigate complex authentication and access issues methodically.
- Excellent communication and collaboration skills, with the ability to work effectively across technical and business teams.
- Bachelor’s degree in Information Security, Computer Science, or a related discipline.
- Relevant professional certifications are preferred, such as Okta Certified Professional, CyberArk Defender, CISSP, or equivalent credentials.
- Strong understanding of security principles, access controls, automation, and identity lifecycle management.
- Ability to work independently, prioritize incidents and projects, and continuously identify opportunities for improvement.
Conditions
- Competitive salary with a comprehensive employee benefits package.
- Medical insurance options for eligible employees and their families.
- Dental and vision coverage.
- Life insurance and disability benefits.
- Healthcare FSA and Limited Healthcare FSA.
- Dependent Care FSA to support eligible dependent-care expenses.
- Health Savings Account (HSA) options.
- Transportation and parking FSAs.
- Paid time off, accrued each pay period, with eligible employees able to earn approximately 20–25 days per calendar year depending on position.
- 9 observed paid holidays.
- Paid family leave.
- Remote work arrangement within the United States.
- Opportunity to work on identity, security, and access challenges within a healthcare technology environment.
- Professional growth opportunities through exposure to modern IAM platforms, automation, security frameworks, and enterprise systems.