Senior Okta IAM Engineer

Tenable, Inc.•Columbia, MD

9d•$114,500 - $152,500•Hybrid

About The Position

As a Senior IAM Engineer within Tenable's IAM and Corporate Applications team, you will lead the design, automated deployment, and administration of the Okta enterprise identity platform. Your core responsibilities include architecting, writing, and maintaining scalable Terraform modules to provision and manage Okta applications, groups, authentication policies, authorization rules, and admin role assignments. You will manage Okta Workforce Identity Cloud configurations such as SSO, MFA, Adaptive Authentication, Universal Directory, and Workflows. Additionally, you will automate user onboarding, offboarding, and role-based provisioning (SCIM, SAML, OIDC) across cloud infrastructure and enterprise software. You will enforce Least Privilege Access and Zero Trust policies, assist with compliance reporting (SOX, SOC2, ISO 27001), integrate Okta Terraform workflows into continuous deployment pipelines (GitHub/Jenkins CI/CD), and serve as a subject matter expert for complex identity integrations and incident escalations. You will also step in as the primary subject matter expert for all Okta-related initiatives across the enterprise environment, leverage Terraform to manage Okta resources and configurations, driving scalable lifecycle management processes and seamless user access control across a secure environment. You will assist with managing a broader suite of corporate applications, including Google Workspace, Slack, GitHub, and Atlassian Jira & Confluence. You will play a key role in supporting the adoption and integration of emerging AI platforms related to corporate application infrastructure.

Requirements

8+ years of hands-on experience designing and managing Okta enterprise environments and IAM.
3+ years of production experience using Terraform to manage identity providers (specifically the Okta Terraform provider), custom modules, state management, and continuous deployment pipelines.
Ability to commute to our Columbia, MD office three days a week.
Deep understanding of identity protocols including SAML 2.0, OAuth 2.0, OIDC, SCIM, and LDAP.
Experience with scripting and automation using Python, Bash, or PowerShell, and interacting directly with Okta REST APIs.
Must be authorized to work for any employer in the U.S. without sponsorship.

Nice To Haves

Experience with Okta Workflows, Okta Identity Governance (OIG), or Privileged Access Management (PAM) integrations.
Experience operating within multi-cloud environments (AWS, GCP, Azure).
A proven track record in enterprise application onboarding automation and directory consolidation.

Responsibilities

Lead the design, automated deployment, and administration of the Okta enterprise identity platform.
Architect, write, and maintain scalable Terraform modules to provision and manage Okta applications, groups, authentication policies, authorization rules, and admin role assignments.
Manage Okta Workforce Identity Cloud configurations such as SSO, MFA, Adaptive Authentication, Universal Directory, and Workflows.
Automate user onboarding, offboarding, and role-based provisioning (SCIM, SAML, OIDC) across cloud infrastructure and enterprise software.
Enforce Least Privilege Access and Zero Trust policies.
Assist with compliance reporting (SOX, SOC2, ISO 27001).
Integrate Okta Terraform workflows into continuous deployment pipelines (GitHub/Jenkins CI/CD).
Serve as a subject matter expert for complex identity integrations and incident escalations.
Manage a broader suite of corporate applications, including Google Workspace, Slack, GitHub, and Atlassian Jira & Confluence.
Support the adoption and integration of emerging AI platforms related to corporate application infrastructure.