Okta SME

TEKsystems•New York, NY

6d•$55 - $60•Remote

About The Position

We are seeking an experienced IT Systems Administrator (Contingent Worker) to serve as a high-autonomy execution partner within the IT organization. This role is designed for a versatile, hands-on administrator who can operate across the full breadth of an enterprise IT stack—with particular depth in device management and identity platforms. You will work in close coordination with the Senior Client Platform Engineer (FTE), who sets technical direction and architectural priorities. Your focus will be translating that direction into shipped work: configuring, maintaining, troubleshooting, automating, and documenting systems across device management, identity and access management, SaaS administration, and IT operations.

Requirements

7+ years of hands-on experience in IT systems administration, endpoint engineering, or a comparable infrastructure operations role.
Strong working knowledge of at least one enterprise MDM platform; direct Jamf Pro experience is strongly preferred and FleetDM second.
Experience administering Okta or a comparable enterprise identity provider, including SSO integrations, SCIM, and lifecycle management.
Proficiency in shell scripting (bash/zsh) for system automation; Python experience is a strong plus.
Familiarity with macOS administration, including system internals, MDM protocol behavior, profiles, and security frameworks.
Demonstrated ability to work independently and manage multiple concurrent tasks with minimal oversight.
Excellent written communication skills, with comfort operating asynchronously via Slack and Jira across time zones.
Experience rebuilding / re-architecting Okta, not just maintaining it
Understands best practices (RBAC, lifecycle, governance, structure)
Strong experience with SSO, SCIM, and Okta Workflows

Nice To Haves

Deep expertise in Jamf Pro: policies, profiles, Smart Groups, Extension Attributes, APIs (Classic + Pro), and package management.
Experience with Google Workspace admin console operations and directory management.
Experience with endpoint visibility platforms such as FleetDM, osquery, or similar tooling.
Familiarity with Zero Trust concepts, Device Trust, or certificate-based authentication workflows.
Comfort with Git-based workflows for script and configuration management, including branching strategies, pull requests, code review practices, and CI/CD workflows.
Background in SaaS-first, remote-first organizations.
Experience supporting developer-heavy environments and familiarity with developer tooling ecosystems.
JAMF 200 certified level, 300 would be optimal.

Responsibilities

MDM administration: Build, maintain, and troubleshoot policies, configuration profiles, Smart Groups, Extension Attributes, scripts, and packages within Jamf Pro across a macOS fleet.
Fleet remediation: Investigate and resolve compliance drift, permissions issues, and configuration inconsistencies surfaced through monitoring, Smart Groups, or support escalations.
macOS lifecycle: Support OS migration campaigns, enrollment workflows, device provisioning (DEP/ADE), and hardware lifecycle processes.
Scripting & automation: Write production-quality bash/zsh/Python scripts for fleet operations, including Extension Attributes, remediation workflows, software deployment, and scheduled maintenance.
Endpoint visibility: Contribute to endpoint query and observability tooling (e.g., FleetDM/osquery) as assigned.
Okta administration: Execute SSO/SAML/OIDC application integrations, SCIM provisioning, group and lifecycle policy management, and access reviews.
Directory services: Support Google Workspace directory management, OU policy configuration, and admin console operations.
Access governance: Assist with Device Trust, conditional access policy configuration, and endpoint compliance enforcement initiatives.
SaaS operations: Administer and support business-critical SaaS applications, including user provisioning, configuration, license management, and vendor-side troubleshooting.
IT process execution: Participate in change management, access request fulfillment, onboarding/offboarding automation, and operational runbook execution.
Security collaboration: Support security-driven initiatives, including access audits, endpoint hardening, extension/plugin policy enforcement, incident response tasks, and remediation of security vulnerabilities (e.g., CVE-driven tickets) as assigned.
Backlog execution: Work from a prioritized task board (Jira), providing regular status updates and proactively flagging blockers.
Documentation: Produce clear runbooks, decision logs, and technical documentation for all completed work.
Async collaboration: Coordinate with Security, Engineering, and IT peers via Slack and other asynchronous channels, ensuring clear written handoffs across time zones.