Cloud Engineer (Okta)

Cloud Engineer (Okta), Malvern, PA, US

Cloud Engineer (Okta)

Key Responsibilities

• Design, engineer, configure, and maintain Okta Workforce Identity solutions and platform capabilities.
• Develop scalable SSO, federation, MFA, password less authentication, authorization, and identity lifecycle solutions.
• Integrate enterprise applications using SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), SCIM, REST APIs, and federation technologies.
• Define reusable engineering patterns, technical standards, and secure configuration baselines for identity services.
• Passwordless, User & Device Authentication
• Engineer Okta FastPass, Device Trust, Device Bound SSO, FIDO2, and device-based authentication capabilities.
• Design secure authentication experiences across desktop, mobile, remote-access and shared-device use cases.
• Implement privileged-access, step-up authentication, and authentication assurance controls while improving the user experience.
• Automation, Integration & Delivery
• Develop automation and tooling using Okta APIs, Workflows, Python, PowerShell, JavaScript, Terraform, GitHub, and CI/CD practices.
• Support application onboarding, identity lifecycle integration, platform enhancements, testing, rollout planning, production releases, and post-deployment validation.
• Troubleshoot complex authentication, federation, provisioning, device-context, and application-integration issues.
• Create implementation documentation, technical designs, test plans, operational procedures, and knowledge articles.
• Reliability, Operations & Lifecycle Management
• Ensure platform availability, resiliency, security, performance, and operational readiness.
• Maintain monitoring, alerting, dashboards, log analysis, and observability using tools such as Splunk or Elastic.
• Provide production support; participate in incident response, problem management, root cause analysis, and continuous improvement.
• Plan and execute platform upgrades, feature adoption, change management, and production validation.
• Conduct disaster recovery, failover, contingency, and resiliency testing; maintain runbooks and support documentation.
• Security & Compliance Engineering
• Remediate vulnerabilities, security findings, configuration risks, and identity-related control gaps.
• Partner with cybersecurity teams on identity threat mitigation, privileged-access controls, and security-hardening initiatives.

Qualifications

Required Qualifications:

• 5–10 years of experience in Identity and Access Management, identity platform engineering, security engineering, cloud security, or a related discipline.
• Hands-on experience with an enterprise identity provider such as Okta, Microsoft Entra ID, Ping Identity, or Auth0.
• Experience with endpoint and mobile device management platforms such as Microsoft Intune or Omnissa Workspace ONE.
• Demonstrated experience with SAML 2.0, OAuth 2.0, OIDC, SCIM, MFA, federation, and modern authentication technologies.
• Experience onboarding and integrating enterprise applications and troubleshooting authentication and provisioning flows.
• Experience with REST APIs and scripting or development using Python, PowerShell, or JavaScript.
• Experience supporting production services, releases, incidents, change management, and technical documentation.
• Robust analytical, troubleshooting, communication, and cross-functional collaboration skills.

Preferred Qualifications

• Hands‑on experience with Okta Workforce Identity Cloud, Okta FastPass, Okta Workflows, Universal Directory, and Lifecycle Management.
• Knowledge of passwordless authentication, FIDO2/WebAuthn, device assurance, Device Trust, and Device Bound SSO.
• Experience with AWS, Microsoft Azure, or Google Cloud Platform.
• Experience with automation, Infrastructure as Code, Terraform, GitHub, and CI/CD pipelines.
• Experience with SIEM and observability platforms such as Splunk or Elastic.
• Relevant IAM, Okta, security, or cloud certifications.
• Core Technical Skills
• Okta Workforce Identity Cloud and enterprise IdPs
• SAML, OAuth, OIDC, SCIM, federation
• MFA, FIDO2, passwordless, device authentication
• Identity lifecycle management and provisioning
• REST APIs, Python, PowerShell, JavaScript
• Terraform, GitHub, CI/CD and automation
• Splunk or Elastic monitoring and log analysis
• Production support, incident response and change management

Benefits At IntelliBee

• Long‑Term Stability: Join us on a multi‑year opportunities with room to grow.
• Comprehensive Health Coverage: Access quality healthcare benefits to keep you and your family well.
• Future Planning: Enroll in our 401(k) program and invest in your financial security.
• GC Assistance: We support immediate Green Card processing, if required.

Date Posted:02-Oct-2026