Okta Subject Matter Expert

Calista Corporation•Washington, DC

About The Position

StraitSys Inc. is seeking an experienced Okta Subject Matter Expert to support the Department of Justice (DOJ), Executive Office for United States Attorneys (EOUSA), Office of the Chief Information Officer (OCIO), Cybersecurity Services (CSS) Identity and Access Management (USAidam) Program in Washington, DC. The role provides technical expertise in designing, configuring, integrating, administering, maintaining, and enhancing enterprise Identity and Access Management (IAM) solutions, primarily using Okta Identity Engine (OIE), Okta Advanced Server Access (ASA), and Okta Privileged Access (OPA). The Okta SME supports secure authentication, single sign-on (SSO), multi-factor authentication (MFA), application federation, privileged access management, and identity lifecycle integration across the USAidam environment. The role collaborates with Government stakeholders, SailPoint engineers, cybersecurity personnel, and DevSecOps teams to maintain identity services, automate access-management processes, troubleshoot technical issues, and advance Federal Zero Trust Architecture objectives. The position supports ongoing operations and maintenance (O&M), application onboarding, system enhancements, security compliance, and continuous improvement of USAidam identity and authentication capabilities. The listed work location is EOUSA Headquarters, 175 N Street NE, Washington, DC; remote work is permitted if authorized by the COR.

Requirements

Demonstrated hands-on experience implementing, configuring, administering, and supporting Okta Identity Engine (OIE) in enterprise environments.
Experience implementing and maintaining Okta-based SSO, MFA, authentication policies, and application integrations.
Experience with SAML 2.0, OIDC, OAuth 2.0, and SCIM authentication and federation protocols.
Experience configuring and troubleshooting Okta integrations with Active Directory, enterprise applications, and external identity providers.
Experience implementing, configuring, or maintaining Okta Advanced Server Access (ASA) and/or Okta Privileged Access (OPA).
Experience supporting privileged account management, role-based access control (RBAC), least privilege, and privileged account lifecycle processes.
Experience deploying, configuring, maintaining, and troubleshooting Okta agents, connectors, and supporting infrastructure.
Experience troubleshooting complex authentication, identity federation, access provisioning, and system integration issues.
Experience supporting Windows and Linux server environments and enterprise directory services.
Familiarity with scripting, automation, APIs, and identity-management integrations.
Experience supporting enterprise IT operations, system maintenance, patching, testing, and deployment activities.
Strong technical troubleshooting, documentation, communication, and stakeholder coordination skills.
Ability to collaborate with cybersecurity engineers, application owners, developers, and Government stakeholders.

Nice To Haves

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Information Systems, or a related technical discipline.
Okta Certified Administrator, Okta Certified Consultant, or another relevant Okta certification.
CompTIA Security+, CISSP, or another relevant cybersecurity certification.
Experience supporting DOJ, EOUSA, or another Federal Government organization.
Experience integrating Okta with SailPoint IdentityIQ, including SailPoint's Okta Connector.
Experience configuring Okta Org2Org federation and integrations with external identity providers.
Experience with PIV, PIV-I, PIV-C, and derived PIV authentication.
Experience supporting Okta ASA/OPA in large-scale Windows, Linux, and cloud server environments.
Experience with AWS Lambda, PowerShell, REST APIs, and identity-management automation.
Experience with Splunk or comparable enterprise security monitoring and audit logging tools.
Familiarity with GitLab, CI/CD pipelines, Agile development, and DevSecOps methodologies.
Experience supporting Federal Zero Trust Architecture initiatives and NIST SP 800-63, NIST SP 800-207, and NIST SP 800-53 requirements.
Experience supporting Federal security authorization, vulnerability remediation, and compliance activities.
Experience developing technical documentation, integration guides, SOPs, and operational support procedures.

Responsibilities

Serve as a technical subject matter expert for Okta Identity Engine, Okta Identity-as-a-Service (IDaaS), Okta Advanced Server Access, and Okta Privileged Access in the USAidam environment.
Design, configure, administer, maintain, and enhance Okta-based authentication and identity services supporting USAlogin and USApriv.
Implement and maintain SSO and MFA using SAML 2.0, OIDC, Okta Verify, PIV credentials, and other approved authentication technologies.
Configure and maintain Okta integrations with enterprise applications, Active Directory, SailPoint IdentityIQ, DOJ Login, and external identity providers.
Support application onboarding and federation, including Okta Org2Org connections, authentication policies, user provisioning, role assignments, and access management.
Deploy, configure, troubleshoot, and maintain Okta AD agents, Okta Verify for Desktop, and Okta ASA/OPA clients and agents.
Configure and maintain privileged access controls for Windows, Linux, and AWS environments, enforcing least privilege and strong authentication.
Onboard Windows and Linux servers into the USApriv privileged access management environment, including agent deployment, configuration, and role management.
Develop and maintain automated processes for privileged account discovery, provisioning, entitlement updates, deprovisioning, and lifecycle management.
Integrate privileged account management processes with SailPoint IdentityIQ governance workflows and access certification requirements.
Configure and support privileged session recording, audit logging, and forwarding of security events to Government-designated monitoring systems.
Troubleshoot complex authentication, federation, provisioning, integration, and privileged-access issues escalated by the USAidam Helpdesk or Government stakeholders.
Develop and maintain automation scripts and API integrations using technologies such as PowerShell, JSON, REST APIs, and AWS Lambda.
Support application and system patching, security updates, vulnerability remediation, and routine O&M activities.
Participate in Agile/DevSecOps activities, including configuration management, testing, regression testing, User Acceptance Testing (UAT), and production deployments.
Support security and compliance activities, including access reviews, audit reporting, Security and Privacy Assessment & Authorization (SPA&A), and Federal Zero Trust initiatives.
Evaluate emerging Okta capabilities and recommend improvements to authentication, privileged access, automation, security, and system performance.
Develop and maintain technical documentation, configuration guides, system design documentation, Standard Operating Procedures (SOPs), and knowledge-transfer materials.
Collaborate with Government Program Managers, cybersecurity personnel, SailPoint engineers, DevSecOps teams, and application owners to ensure reliable and secure identity services.