IAM Engineer

About the role

This is a 100% onsite position located in Chicago, IL.

Responsibilities

• Okta Access Gateway Administration
  • Administer, maintain, and support the enterprise Okta Access Gateway platform.
  • Configure and onboard web-based, legacy, and on-premises applications.
  • Support migration from traditional authentication methods to modern Identity Providers.
  • Manage authentication, authorization, access controls, and user access policies.
  • Partner with application teams to define onboarding requirements and implementation approaches.
• Identity & Access Management
  • Work with Okta Workforce Identity and Microsoft Entra ID.
  • Implement and support SAML, OAuth, OIDC, Kerberos, LDAP, IWA, MFA, and Adaptive Authentication.
  • Troubleshoot authentication, authorization, federation, and SSO issues.
  • Support identity modernization and application transformation initiatives.
  • Apply Zero Trust and Least Privilege principles.
• Application Onboarding & Integration
  • Assess applications and determine appropriate authentication patterns.
  • Configure headers, policies, connectors, and access rules.
  • Validate end-to-end authentication and access flows.
  • Support application rationalization and modernization initiatives.
• Operational Support
  • Provide L2/L3 production support for incidents and service requests.
  • Troubleshoot authentication failures, access issues, application integrations, and connectivity problems.
  • Analyze logs and system events to identify root causes.
  • Participate in incident response, problem management, and post-incident reviews.
  • Maintain runbooks and support documentation.
  • Support platform maintenance and upgrades.
• Platform Resiliency & Security
  • Ensure high availability, resiliency, and performance of the OAG platform.
  • Monitor platform health, capacity, and performance.
  • Participate in disaster recovery planning, testing, and execution.
  • Implement backup and recovery procedures and remediate single points of failure.
  • Support infrastructure hardening and security improvement initiatives.
• Security & Compliance
  • Implement security controls supporting regulatory and audit requirements.
  • Participate in security reviews and remediation activities.
  • Support access certification, privileged access, and entitlement governance.
  • Maintain audit evidence and platform documentation.
  • Ensure compliance with enterprise security standards and policies.

Skills

• Okta Access Gateway
• Okta Workforce Identity
• Microsoft Entra ID
• SAML, OAuth, OIDC
• Kerberos, LDAP, IWA
• MFA, Adaptive Authentication
• SSO
• L2/L3 Support
• Application Integration
• Identity Modernization
• Zero Trust
• IAM