Senior Systems Engineer, IAM Operations

Responsibilities

• Own end-to-end user lifecycle management in Okta, including onboarding, offboarding, hires, rehires, and contractor conversions.
• Manage sensitive offboarding scenarios, including closing lingering user sessions on personal devices across Slack, Google Workspace, and other platforms.
• Administer core SaaS applications such as Slack, Claude, Port.io, and DocuSign, including user provisioning, role-based access control (RBAC), and automated license reclamation.
• Build access request workflows and approval automations in an identity governance platform to streamline access delivery and enforce least-privilege principles.
• Execute and support periodic user access reviews and entitlement certifications across core SaaS platforms.
• Administer Okta security features, including FastPass multifactor authentication (MFA) and device trust.
• Build automations for application provisioning and repetitive IAM tasks using Okta Workflows and no-code platforms, including custom SCIM solutions where native support is unavailable.
• Train Service Desk team members on security policies, IAM best practices, and major system changes.
• Act as a Tier 2 escalation point for complex access, authentication, and application integration issues.
• Partner with the API team to define requirements for custom automations.
• Troubleshoot authentication failures, API errors, and access-related incidents using REST APIs and scripting.
• Document SOPs and runbooks for consistent, scalable IAM operations.

Requirements

• 5+ years of experience in Systems Engineering, IT Operations, or Identity and Access Management.
• Hands-on Okta administration experience.
• Experience with identity governance platforms such as Lumos, Okta Identity Governance, or similar frameworks.
• Experience managing user lifecycle automation, including onboarding, offboarding, hires, rehires, and contractor conversions.
• Familiarity with Okta FastPass MFA and device trust.
• Familiarity with SCIM provisioning, including custom solutions.
• Working knowledge of no-code or low-code automation tools, particularly Okta Workflows.
• Strong troubleshooting skills across authentication issues and REST APIs.
• Experience with scripting languages such as Python or PowerShell for bulk operations.
• Experience supporting enterprise environments including Google Workspace and Slack.
• Clear communication skills and comfort partnering with API, engineering, and Service Desk teams.

Nice-to-Haves

• Exposure to identity governance platforms such as Lumos or Opal.
• Experience with OIDC or SAML application integrations.
• Terraform or other infrastructure-as-code experience.
• Okta Administrator or Consultant certification.

Compensation and Benefits

• Compensation range of $165,000 - $200,000 plus bonus.
• Restricted Stock Units included in all offers.
• Paid time off, paid holidays, and leave of absence programs.
• Comprehensive health, dental, and vision insurance.
• Employer HSA contributions.
• Paid parental leave.
• Paid life insurance and short- and long-term disability coverage.
• Professional development and tuition reimbursement.
• Mental health and wellness support.
• Commuter benefits and cell phone stipend.
• 401(k) retirement plan with company match up to 4% of salary.
• Volunteer time off, global travel insurance, emergency assistance, daily meal allowance, and location-specific perks.