Senior Okta Architect/Engineer

ASRC Federal is actively hiring a Senior Okta Architect/Engineer in support of our Defense Counterintelligence Security Agency (DCSA) program based out of Quantico, VA.

This is primarily a Telework position with a requirement to be onsite at least two (2) days a week or as needed at Quantico Marine Corps Base, VA.

Position Description:

We are seeking an exceptionally skilled and experienced Senior Okta Architect/Engineer to lead our enterprise Identity and Access Management (IAM) initiatives. The ideal candidate will serve as the technical authority for our Okta platform, responsible for enterprise-wide architecture, strategic planning, advanced implementation, and optimization of our Okta Identity and Access Management solutions. This senior-level role requires deep expertise in designing and implementing complex IAM architectures that ensure the confidentiality, integrity, and availability of our organization's data and systems across a large-scale, hybrid enterprise environment.The Senior Okta Architect/Engineer will leverage the complete Okta ecosystem, including Advanced Single Sign-On (SSO), Adaptive Multi-Factor Authentication (MFA), Universal Directory, Advanced Lifecycle Management, API Access Management, and Okta Workflows to architect and enforce our Zero Trust security model. This role will also involve strategic planning, vendor engagement, and serving as the primary technical liaison between business stakeholders and technical teams.Minimum Requirements:

Experience: Minimum of 10 years of progressive experience in Identity and Access Management, with at least 5 years of hands-on experience architecting and implementing Okta solutions in large-scale enterprise environments (10,000+ users)Security Clearance: Active Secret Clearance REQUIRED, eligible to be upgraded to TS/SCICertification Requirements:

Must meet 8570 certification requirements at the time of hire: IAT Level II or higher (e.g., Security+ CE, CCNA Security, CySA+, GICSP, GSEC, CISSP, CASP+, or higher tiered 8570 certification)

Highly Desired:

CISSP, CISM, or equivalent advanced security certificationOkta certifications are highly desired, such as:

Okta Certified ProfessionalOkta Certified AdministratorOkta Certified Consultant.

Education: Bachelor's Degree in Cybersecurity, Computer Science, Information Systems Management, or a related field; Master's Degree preferred. An equivalent combination of military service and/or at least ten (10) years of significant, relevant work experience may be considered in lieu of degree requirement.

Responsibilities:

Design and architect enterprise-wide Okta IAM solutions that align with organizational security strategy, business objectives, and compliance requirementsDevelop and maintain the Okta platform roadmap, identifying opportunities for optimization, automation, and enhanced securityLead architectural reviews and provide technical guidance on complex IAM initiativesEvaluate emerging Okta features and IAM technologies to drive continuous improvementDesign disaster recovery and business continuity strategies for the Okta platform

Advanced Implementation and Configuration

Lead the design and implementation of complex Okta integrations with enterprise applications, cloud services, and legacy systemsArchitect and implement advanced authentication policies, including adaptive MFA, risk-based authentication, and context-aware access controlsDesign and implement sophisticated Okta Workflows for automated provisioning, de-provisioning, and lifecycle managementDevelop custom integrations using Okta APIs, SDKs, and webhooks to meet unique business requirementsImplement and optimize API Access Management for securing APIs and microservices

Platform Governance and Optimization

Establish and enforce governance frameworks for Okta platform management, including change control, configuration management, and security policiesConduct regular platform health assessments, performance tuning, and capacity planningImplement monitoring and alerting strategies to ensure platform availability and performanceLead security audits and compliance assessments of the Okta environmentOptimize license utilization and manage vendor relationships

Technical Leadership and Collaboration

Serve as the primary technical authority and subject matter expert for all Okta-related initiativesProvide advanced troubleshooting and resolution for complex SSO, authentication, authorization, and lifecycle management issuesCollaborate with enterprise architecture, security operations, network, application development, and business teams to ensure seamless IAM integrationLead cross-functional teams in the planning and execution of major IAM projectsMentor and provide technical guidance to junior Okta engineers and administrators

Documentation and Knowledge Management

Create and maintain comprehensive enterprise architecture documentation, including solution designs, integration patterns, runbooks, and standard operating proceduresDevelop technical standards and best practices for Okta implementation and managementCreate detailed technical specifications and design documents for complex integrationsMaintain configuration management database (CMDB) entries for Okta components

Training and Enablement

Develop and deliver advanced training programs for IT staff and administrators on Okta capabilities and best practicesProvide mentorship and career development guidance to junior team membersConduct knowledge transfer sessions and workshops for stakeholdersStay current with the latest Okta features, IAM trends, security best practices, and industry standards through continuous learning and professional development

Vendor and Stakeholder Management

Serve as the primary technical liaison with Okta support and professional servicesParticipate in vendor roadmap discussions and provide feedback on product enhancementsPresent technical solutions and recommendations to senior leadership and business stakeholdersTranslate complex technical concepts into business value propositions

Work Environment and Physical Demands:

This is primarily a Telework position with a requirement to be onsite up to two (2) days a weekIf alternate worksite is other than DCSA facilities or corporate office space, must have the reliable ability to communicate over voice (cell phone preferred) and stable, capable internet connectionMust be able to communicate complex technical ideas to a diverse customer base both verbally and in written form