System Engineer II - Okta SME

Computer World Services is seeking a System Engineer II with expertise in Okta solutions. The role involves supporting operating systems and applications, managing user access, and implementing security measures in a cloud environment.

Responsibilities:

• Coordinate and/or perform additions and changes to operating systems and applications; includes investigation, analysis, recommendation, configuration, installation, and testing of new software and applications
• Provide direct support in the day-to-day operations on operating systems and software, including the evaluation of system utilization, monitoring response time and primary support for detection and correction of operational problems
• Will be responsible for securing user applications, application integrations, deployment automation, and improving security using Okta solutions
• Will play a crucial role in implementing Identity and Access Governance solutions, providing advanced authentication, overseeing privileged access management, and ensuring secure information distribution
• Perform tasks including but not limited to User Lifecycle Management, security policy frameworks, and advanced directory integration for cloud and on-premises access
• Use the Okta Policy framework to control user access, map identity attributes and data transformations using Universal Directory, and troubleshoot issues
• Experience with Okta includes installation, configuration, and migrations
• Troubleshoot advanced problems within the Okta IdP by using tools such as SAML tracer, Fiddler, and other similar tools
• Integrate applications with SAML, OpenID Connect, RADIUS and Oauth
• Integrate applications with Multi Factor/Password less Authentication
• Provide Proof of Concepts and Pilots for Advancing Zero Trust integration infrastructure
• Support of primarily Microsoft 365 stack (Exchange Online (hybrid), Intune, Entra ID, Teams, OneDrive)
• Systems Administration: Knowledge of Microsoft Windows Server Platforms, Active Directory, Group Policy as well as basic MS SQL administration
• Ensure that all Group Policy Management (GPM) changes are controlled and documented
• Measure and monitor metrics, identify trends, and report standings and findings to management and other stakeholders
• Participating in meetings with executives to discuss technical issues and propose solutions
• Collaborating with other members of the engineering team to design new features or improve existing ones
• Escalate issues to vendor and third-party entities, as necessary
• Other operational support duties as assigned
• Experience leading engineering projects from start to finish
• Provide support to technical leaders by coordinating activities pertaining to the development, documentation and maintenance associated with changes to the system
• Ability to work and deliver on short response tasking in a fast paced environment
• Ability to effectively manage several projects simultaneously while balancing resources
• Ability to work in a dynamic team environment, adaptable to change, and thrive in an atmosphere that requires trust, initiative, creativity, and strong problem-solving skills
• Strong communication skills with customers over phone, email, or ticketing system
• Ability to work well in a constantly evolving work environment
• Excellent communication and organizational skills; able to articulate intent, frame requirements, set priorities, develop practical methods, and align resources to meet goals

Requirements:

• 10+ or more years of IT experience preferably in a Windows domain environment (hybrid)
• 5+ direct years of experience engineering and providing operations support for Okta SSO solution
• Experience leading engineering projects from start to finish
• Hands-on experience migrating applications to implement Okta
• Strong knowledge of the different identity and access management (IAM) concepts, technologies and authentication protocols
• Intimately familiar with IAM related protocols such as SAML, SPML, XACML, SCIM, OAuth, OIDC, OpenID and REST APIs, and other security interfaces
• Strong experience with Directories, SSO, Federation, Delegated administration, API gateways, SOA services
• An understanding of Zero Trust concepts
• Active Directory including but not limited to Microsoft Active Directory/Azure Active Directory (EntraID)
• Privileged access management (PAM) systems such as Beyond Trust
• Hands-on experience with cloud computing services (O365/Microsoft Azure/AWS)
• Experience with network architecture
• Experience with Windows PowerShell scripting
• Okta Certified
• Must be a US citizen
• Experience as a remote worker demonstrating time management and self-discipline with cultural change management and Agile mindset
• Experience with SailPoint IdentityIQ integration and operations