Okta Identity & Provisioning Engineer

Info-Matrix Corporation•Susquehanna Township, PA

2d•Hybrid

About The Position

Our client is building a hands-on Okta identity and provisioning capability to support public-sector transitions that move user provisioning off legacy, flat-file identity feeds onto Okta as the enterprise standard for identity and access management. You will be the engineer who configures Okta, maps HR attributes sourced from SAP/HR systems into provisioning logic, and helps agency teams stand up secure, auditable user provisioning — working alongside client and SAP/identity technical leads. This role directly owns the Okta implementation workstream at the heart of Commonwealth modernization work.

Requirements

4+ years of identity and access management (IAM) engineering, including demonstrable, project-based hands-on Okta (Workforce Identity) experience.
Okta provisioning & lifecycle — hands-on Okta administration: SCIM provisioning, lifecycle management, attribute mapping, and group/role rules.
SSO protocols — working fluency with SAML, OIDC, and OAuth2, and directory integration (Active Directory / LDAP / Entra ID).
HR-sourced provisioning — experience provisioning identities from an authoritative HR/HCM source (e.g., SAP SuccessFactors, Workday, or equivalent).
U.S.-based and able to attend onsite, in-person meetings in Harrisburg, PA when requested (all work performed within the United States).

Nice To Haves

SAP HR / SuccessFactors as identity source — experience mapping SAP employee-data attributes into Okta provisioning (the source data in these transitions is HR data from SAP).
SAP S/4HANA / API integration — familiarity with S/4HANA data structures and OData/REST APIs. A candidate who covers BOTH Okta provisioning and SAP S/4HANA integration is ideal.
Public-sector delivery — state or Commonwealth of Pennsylvania IT experience; multi-agency, governed, wave-based delivery environments.
Clearance eligibility — able to obtain and hold a U.S. Public Trust.
Okta Certified Administrator
Okta Certified Consultant
Okta Certified Professional or Okta Certified Developer
Adjacent IAM: Microsoft Identity & Access Administrator (SC-300), SailPoint, or CISSP
SAP Certified Associate — SAP SuccessFactors Employee Central (HR data source, a plus)

Responsibilities

Okta configuration — configure Okta for agency applications: attribute mappings, provisioning logic, and group/role rules; produce per-application Okta Configuration Worksheets.
Provisioning & lifecycle (SCIM) — design, build, and validate SCIM-based provisioning/deprovisioning and lifecycle management, sourcing employee identity data from SAP HR / HCM and other authoritative sources.
SSO & directory integration — implement SAML / OIDC / OAuth2 single sign-on and integrate Okta with agency applications and directories (Active Directory / LDAP / Entra ID) as needed.
Hands-on testing & remediation — provide hands-on support for testing, troubleshooting, and remediation during provisioning transitions; produce test plans, test scripts, and remediation logs.
Security & audit — enforce least-privilege access, audit logging, and compliance with client IAM governance and security policies.
Cutover & hypercare — support cutover readiness and post-go-live stabilization for the provisioning use case, validating continuity and triaging issues.