and Access Management Systems Engineer - IAM - Active TS/SCI Required

ZipRecruiter - Arlington, TX

Full-time

Onsite - Arlington, TX

About the position

The Identity and Access Management (IdAM) Systems Engineer will be responsible for the deployment and maintenance of a comprehensive Identity as a Service (IDaaS) platform, specifically utilizing the Okta platform. This role involves managing access and governance, enhancing the Access Management program, and ensuring compliance with audit findings and organizational changes.

Responsibilities

• Design, develop, and maintain an IDaaS solution using the Okta platform.
• Manage access and governance, including single sign-on, federation, enterprise directory architecture, and resource provisioning.
• Demonstrate advanced understanding of business processes, risk management, IT controls, and related standards.
• Identify and evaluate complex business and technology risks, and improve internal controls.
• Install, integrate, and deploy Okta products in client environments.
• Communicate technical and functional aspects of the product and implementation to clients and partners.
• Enhance the Access Management program in collaboration with the IAM team.
• Manage user, group, and password requests in coordination with development teams.
• Create and maintain IdAM metrics.
• Document system access for all users in a centralized repository (CMBD).
• Support audit findings, compliance adherence, and organizational changes.
• Resolve Okta system issues within the service level agreement.
• Create and modify CONOPS and Standard Operating Procedure documents.

Requirements

• BS in Computer Science or IT with 8+ years of experience (additional experience may be considered in lieu of degree).
• IAT Level II Baseline Certification (e.g., CCNA Security, CySA+, GICSP, GSEC, Security+ CE, CND, SSCP).
• Active TS/SCI clearance with the ability to obtain and maintain CI Poly.
• Strong knowledge of Identity and Access Management platforms.
• Excellent written and oral communication skills.
• Ability to work effectively with both technical and non-technical audiences.
• Demonstrated ability to work in a complex, fast-paced environment.

Nice-to-haves

• Experience with DISA and its mission support.
• Familiarity with Active Directory, lifecycle, Oracle Manager or other IDM platforms, Federation protocols (SAML, OAUTH, OpenID), and zero trust principles.