Okta Identity & Provisioning Engineer

About the role

This role directly owns the Okta implementation workstream at the heart of Commonwealth modernization work.

Responsibilities

• Okta configuration — configure Okta for agency applications: attribute mappings, provisioning logic, and group/role rules; produce per-application Okta Configuration Worksheets.
• Provisioning & lifecycle (SCIM) — design, build, and validate SCIM-based provisioning/deprovisioning and lifecycle management, sourcing employee identity data from SAP HR / HCM and other authoritative sources.
• SAML / OIDC / OAuth2 single sign-on — implement SSO protocols and integrate Okta with agency applications and directories (Active Directory / LDAP / Entra ID) as needed.
• Hands-on testing & remediation — provide hands-on support for testing, troubleshooting, and remediation during provisioning transitions; produce test plans, test scripts, and remediation logs.
• Security & audit — enforce least-privilege access, audit logging, and compliance with client IAM governance and security policies.
• Cutover & hypercare — support cutover readiness and post-go-live stabilization for the provisioning use case, validating continuity and triaging issues.

Requirements

• 4+ years of identity and access management (IAM) engineering, including demonstrable, project-based hands-on Okta (Workforce Identity) experience.
• Okta provisioning & lifecycle — hands-on Okta administration: SCIM provisioning, lifecycle management, attribute mapping, and group/role rules.
• SSO protocols — working fluency with SAML, OIDC, and OAuth2, and directory integration (Active Directory / LDAP / Entra ID).
• HR-sourced provisioning — experience provisioning identities from an authoritative HR/HCM source (e.g., SAP SuccessFactors, Workday, or equivalent).
• U.S.-based and able to attend onsite, in-person meetings in Harrisburg, PA when requested (all work performed within the United States).

Strongly Preferred / Nice to Have

• SAP HR / SuccessFactors as identity source — experience mapping SAP employee-data attributes into Okta provisioning (the source data in these transitions is HR data from SAP).
• SAP S/4HANA / API integration — familiarity with S/4HANA data structures and OData/REST APIs.
• Public-sector delivery — state or Commonwealth of Pennsylvania IT experience; multi-agency, governed, wave-based delivery environments.
• C clearance eligibility — able to obtain and hold a U.S. Public Trust.

Benefits

Experience a workplace where people are the X-Factor! At Info-Matrix, we believe our greatest strength is our team—a diverse group of passionate professionals united by a drive to solve real-world business challenges through innovative technology solutions. Our culture is built on integrity, teamwork, and a commitment to excellence, fostering an environment where every voice is valued and every contribution matters!

• Comprehensive Benefits Offered by Info-Matrix
• Health & Wellness: Customized Medical, Dental, and Vision Plans
• Paid Time Off: Generous PTO & 11 paid holidays
• Info-Matrix Paid Coverage: Short-term and long-term disability, life insurance, and AD&D insurance.
• Retail Savings Offering: 401(k) plan with company match