Senior Lead Identity Engineer (Okta, IAM, Zero Trust)

archer • United State

Visa Sponsorship

Apply Now

AI Summary

Lead the design, operation, and evolution of enterprise-scale identity platforms with Okta expertise, ensuring high availability, regulatory compliance, and long-term resiliency. Drive technical direction for authentication, federation, and directory integrations while collaborating across engineering, security, and executive stakeholders. Requires 12+ years in IAM engineering with deep hands-on experience in Okta, OAuth 2.0/OIDC, and cloud-native identity solutions.

Key Highlights

Technical leadership for workforce identity platforms with Okta as the primary IdP

12+ years of hands-on identity engineering experience with deep expertise in Okta and IAM standards

Ownership of end-to-end identity architecture, including authentication flows, federation, and directory integrations

Key Responsibilities

Serve as technical lead for workforce identity platforms, designing and evolving enterprise-scale identity solutions with Okta as the primary IdP

Own end-to-end identity architecture, including authentication flows, federation, directory integrations, and token issuance strategies

Lead design reviews and decisions for identity provider resiliency, failover, and supplier-risk mitigation strategies

Document existing and new architecture while acting as a hands-on engineer and setting technical direction, patterns, and standards

Design and troubleshoot identity flows using OAuth 2.0, OIDC, SAML 2.0, SCIM, and JWT token-based authentication

Ensure token parity, claim consistency, and issuer abstraction across identity providers to minimize application impact

Engineer and maintain directory integrations across Active Directory, Okta UD, and cloud directories (e.g., Ping Directory)

Build and operate identity infrastructure in AWS/GCP/Azure using Infrastructure as Code (Terraform/CloudFormation) and Kubernetes

Automate provisioning, deployment, monitoring, and drift detection for identity platforms with SRE-style operational maturity

Design identity controls aligned with Zero Trust principles and enterprise security policies

Collaborate with security, audit, and risk teams on control validation, incident response, and regulatory compliance (SOX, SOC)

Mentor senior and mid-level engineers to raise overall identity engineering maturity and influence roadmap decisions

Searching for Cyber Security roles that provide visa sponsorship? Connect with international employers through Cyber Security Jobs with Visa Sponsorship opportunities actively seeking talented professionals.

Technical Skills Required

Okta (Workforce Identity, MFA, SSO, policies, lifecycle) OAuth 2.0 / OpenID Connect (OIDC) Infrastructure as Code (Terraform / CloudFormation)

Benefits & Perks

Visa sponsorship

Hybrid working model

Explore our comprehensive directory of visa sponsorship jobs from employers worldwide who are ready to sponsor talented international professionals.

Nice to Have

Ping Identity products (PingFederate, PingOne, Ping Directory)

Experience with LDAP and directory services

Experience with containerized/Kubernetes deployments for identity platforms

Strong troubleshooting skills for complex authentication and federation failures

Job Description

We are seeking a Senior Lead Identity Engineer to provide technical leadership for our workforce identity platform, with deep expertise in Okta and strong proficiency in standards‑based identity and access management technologies. This role is responsible for designing, operating, and evolving enterprise‑scale identity platforms that support high availability, regulatory compliance, and long‑term resiliency—including multi‑IdP and directory strategies. The ideal candidate brings 12+ years of identity engineering experience, understands identity as architecture—not just product configuration, and can operate comfortably across engineering, security, infrastructure, and executive stakeholders.

Want the full job description? Read the complete details on LinkedIn, the original posting.

Continue on LinkedIn

This is a short excerpt. All rights to the full description belong to its original publisher.