Okta Identity & Provisioning Engineer

Quadratic Digital•Harrisburg, PA

3d•Remote

About The Position

Okta Identity & Provisioning Engineer needed to build hands-on Okta identity and provisioning capability to support public-sector transitions. This role will configure Okta, map HR attributes sourced from SAP/HR systems into provisioning logic, and help agency teams stand up secure, auditable user provisioning. This role directly owns the Okta implementation workstream at the heart of Commonwealth modernization work.

Requirements

Okta configuration experience
Experience with attribute mappings, provisioning logic, and group/role rules in Okta
Experience designing, building, and validating SCIM-based provisioning/deprovisioning and lifecycle management
Experience sourcing employee identity data from SAP HR / HCM or other authoritative sources
Experience implementing SAML / OIDC / OAuth2 single sign-on
Experience integrating Okta with agency applications and directories (Active Directory / LDAP / Entra ID)
Experience with testing, troubleshooting, and remediation during provisioning transitions
Experience producing test plans, test scripts, and remediation logs
Experience enforcing least-privilege access, audit logging, and compliance with client IAM governance and security policies
Experience supporting cutover readiness and post-go-live stabilization for provisioning use cases

Nice To Haves

Relevant Okta provisioning project experience
SAP HR / S/4HANA project experience

Responsibilities

Okta configuration — configure Okta for agency applications: attribute mappings, provisioning logic, and group/role rules; produce per-application Okta Configuration Worksheets.
Provisioning & lifecycle (SCIM) — design, build, and validate SCIM-based provisioning/deprovisioning and lifecycle management, sourcing employee identity data from SAP HR / HCM and other authoritative sources.
SSO & directory integration — implement SAML / OIDC / OAuth2 single sign-on and integrate Okta with agency applications and directories (Active Directory / LDAP / Entra ID) as needed.
Hands-on testing & remediation — provide hands-on support for testing, troubleshooting, and remediation during provisioning transitions; produce test plans, test scripts, and remediation logs.
Security & audit — enforce least-privilege access, audit logging, and compliance with client IAM governance and security policies.
Cutover & hypercare — support cutover readiness and post-go-live stabilization for the provisioning use case, validating continuity and triaging issues.