Okta Expert

This job opportunity is part of an RFP process; candidates are invited to submit their resumes detailing relevant experience.

Job Title: Okta Expert - Systems Engineer, Associate

Work Location: Washington DC (Onsite)

Clearance: Public Trust

Required: US citizen or Lawful Permanent Resident

LCG is a minority-owned technology consulting firm that has been a trusted partner to more than 40 federal agencies, including 21 of the 27 Institutes and Centers (ICs) at the National Institutes of Health (NIH). For over 25 years, LCG has brought digitization and innovation to the Health and Human Services (HHS) and the NIH ecosystems. We support IT organizations by bringing precision technology and operation models that achieve mission capabilities and performance success.

Job Summary:

LCG's Growth Team is seeking an experienced Okta Expert (Systems Engineer, Associate).

We are seeking an experienced Okta Expert (System Engineer Level II) to support and enhance our network infrastructure and identity management systems. This role involves configuring, maintaining, and troubleshooting Okta SSO solutions, ensuring seamless authentication and integration across multiple applications. The ideal candidate will be responsible for network hardware and software administration, identity and access management (IAM) configurations, and zero-trust security implementations.

The Okta Expert will provide hands-on support for Microsoft 365 services (Exchange Online, Intune, Entra ID, Teams, OneDrive), troubleshoot system-level issues, and drive the adoption of security best practices. This role also includes direct engagement with executives, stakeholders, and vendors to identify technical challenges and implement solutions.

Key Tasks and Responsibilities:

* Lead the installation, configuration, and migration of Okta identity solutions.

* Troubleshoot complex issues within the Okta Identity Provider (IdP) using tools like SAML Tracer, Fiddler, and other diagnostic utilities.

* Integrate applications with authentication protocols such as SAML, OpenID Connect, RADIUS, and OAuth.

* Implement Multi-Factor Authentication (MFA) and passwordless authentication solutions.

* Develop Proof of Concepts (PoCs) and pilot projects for advancing Zero Trust security initiatives.

* Support and manage Microsoft 365 applications, including Exchange Online (hybrid), Intune, Entra ID, Teams, and OneDrive.

* Administer Windows Server platforms, Active Directory, Group Policy, and basic MS SQL operations.

* Ensure all Group Policy Management (GPM) changes are properly documented and controlled.

* Monitor system performance, analyze trends, and generate reports for management and stakeholders.

* Collaborate with the engineering team to design and enhance system features.

* Participate in executive meetings to discuss technical issues and recommend solutions.

* Coordinate with vendors and third-party providers for issue resolution.

* Lead and manage engineering projects from initiation to completion.

* Support technical leadership by managing and documenting system changes.

* Handle multiple projects efficiently in a fast-paced, dynamic environment.

* Communicate effectively with customers via phone, email, and ticketing systems.

Qualifications:

* 10+ years of IT experience with at least 3 years dedicated to Okta SSO engineering and support.

* Required Certification: Okta Certified.

* Proven experience in migrating applications and implementing Okta solutions.

* In-depth knowledge of IAM concepts, authentication protocols, and security best practices.

* Expertise in identity-related protocols, including SAML, SPML, XACML, SCIM, OAuth, OIDC, OpenID, and REST APIs.

* Strong experience with SSO, Federation, Delegated Administration, API Gateways, and SOA Services.

* Understanding of Zero Trust security models.

* Hands-on experience with Microsoft Active Directory/Azure AD (Entra ID) and Privileged Access Management (PAM) tools (e.g., BeyondTrust).

* Proficiency with cloud computing services, including Microsoft 365, Azure, and AWS.

* Experience with SailPoint IdentityIQ integration and network architecture.

* Proficient in Windows PowerShell scripting for automation and administration.

Self-motivated, strong time management skills, and ability to work effectively in remote environments

Compensation and Benefits

The projected compensation range for this position is $100,145 to $129,222.50 per year benchmarked in the Washington, D.C. metropolitan area. The target salary is $113,885.00. The salary range provided is a good faith estimate representative of all experience levels. Salary at LCG is determined by various factors, including but not limited to role, location, the combination of education/training, knowledge, skills, competencies, certifications, and work experience.

LCG offers a competitive, comprehensive benefits package which includes health insurance options (medical, dental, vision), life and disability insurance, retirement plan contributions, as well as paid leave, federal holidays, professional development, and lifestyle benefits.

Devoted to Fair and Inclusive Practices

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law.

If you are interested in applying for employment with LCG and need special assistance or an accommodation to apply for a posted position, contact our Human Resources department by email at hr@lcginc.com.

Securing Your Data

Beware of fraudulent job offers using LCG's name. LCG will never request payment-related details or advancement of money during the application process. Legitimate communication will only come from lcginc.com or system@hirebridgemail.com emails, not free commercial services like Gmail or WhatsApp. If you receive suspicious emails asking for payment or personal information, contact us immediately at hr@lcginc.com.

If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission.