Senior Okta Architect/Engineer

ASRC Federal is actively hiring a Senior Okta Architect/Engineer in support of our Defense Counterintelligence Security Agency (DCSA) program based out of Quantico, VA.   This is primarily a Telework position with a requirement to be onsite at least two (2) days a week or as needed at Quantico Marine Corps Base, VA.   Position Description:   We are seeking an exceptionally skilled and experienced Senior Okta Architect/Engineer to lead our enterprise Identity and Access Management (IAM) initiatives. The ideal candidate will serve as the technical authority for our Okta platform, responsible for enterprise-wide architecture, strategic planning, advanced implementation, and optimization of our Okta Identity and Access Management solutions. This senior-level role requires deep expertise in designing and implementing complex IAM architectures that ensure the confidentiality, integrity, and availability of our organization's data and systems across a large-scale, hybrid enterprise environment. The Senior Okta Architect/Engineer will leverage the complete Okta ecosystem, including Advanced Single Sign-On (SSO), Adaptive Multi-Factor Authentication (MFA), Universal Directory, Advanced Lifecycle Management, API Access Management, and Okta Workflows to architect and enforce our Zero Trust security model. This role will also involve strategic planning, vendor engagement, and serving as the primary technical liaison between business stakeholders and technical teams. Minimum Requirements:  Experience: Minimum of 10 years of progressive experience in Identity and Access Management, with at least 5 years of hands-on experience architecting and implementing Okta solutions in large-scale enterprise environments (10,000+ users) Security Clearance: Active Secret Clearance REQUIRED, eligible to be upgraded to TS/SCI Certification Requirements: Must meet 8570 certification requirements at the time of hire: IAT Level II or higher (e.g., Security+ CE, CCNA Security, CySA+, GICSP, GSEC, CISSP, CASP+, or higher tiered 8570 certification) Highly Desired: CISSP, CISM, or equivalent advanced security certification Okta certifications are highly desired, such as: Okta Certified Professional Okta Certified Administrator Okta Certified Consultant.   Education: Bachelor's Degree in Cybersecurity, Computer Science, Information Systems Management, or a related field; Master's Degree preferred. An equivalent combination of military service and/or at least ten (10) years of significant, relevant work experience may be considered in lieu of degree requirement.   Responsibilities: Design and architect enterprise-wide Okta IAM solutions that align with organizational security strategy, business objectives, and compliance requirements Develop and maintain the Okta platform roadmap, identifying opportunities for optimization, automation, and enhanced security Lead architectural reviews and provide technical guidance on complex IAM initiatives Evaluate emerging Okta features and IAM technologies to drive continuous improvement Design disaster recovery and business continuity strategies for the Okta platform   Advanced Implementation and Configuration Lead the design and implementation of complex Okta integrations with enterprise applications, cloud services, and legacy systems Architect and implement advanced authentication policies, including adaptive MFA, risk-based authentication, and context-aware access controls Design and implement sophisticated Okta Workflows for automated provisioning, de-provisioning, and lifecycle management Develop custom integrations using Okta APIs, SDKs, and webhooks to meet unique business requirements Implement and optimize API Access Management for securing APIs and microservices   Platform Governance and Optimization Establish and enforce governance frameworks for Okta platform management, including change control, configuration management, and security policies Conduct regular platform health assessments, performance tuning, and capacity planning Implement monitoring and alerting strategies to ensure platform availability and performance Lead security audits and compliance assessments of the Okta environment Optimize license utilization and manage vendor relationships   Technical Leadership and Collaboration Serve as the primary technical authority and subject matter expert for all Okta-related initiatives Provide advanced troubleshooting and resolution for complex SSO, authentication, authorization, and lifecycle management issues Collaborate with enterprise architecture, security operations, network, application development, and business teams to ensure seamless IAM integration Lead cross-functional teams in the planning and execution of major IAM projects Mentor and provide technical guidance to junior Okta engineers and administrators   Documentation and Knowledge Management Create and maintain comprehensive enterprise architecture documentation, including solution designs, integration patterns, runbooks, and standard operating procedures Develop technical standards and best practices for Okta implementation and management Create detailed technical specifications and design documents for complex integrations Maintain configuration management database (CMDB) entries for Okta components   Training and Enablement Develop and deliver advanced training programs for IT staff and administrators on Okta capabilities and best practices Provide mentorship and career development guidance to junior team members Conduct knowledge transfer sessions and workshops for stakeholders Stay current with the latest Okta features, IAM trends, security best practices, and industry standards through continuous learning and professional development   Vendor and Stakeholder Management Serve as the primary technical liaison with Okta support and professional services Participate in vendor roadmap discussions and provide feedback on product enhancements Present technical solutions and recommendations to senior leadership and business stakeholders Translate complex technical concepts into business value propositions    Work Environment and Physical Demands:  This is primarily a Telework position with a requirement to be onsite up to two (2) days a week If alternate worksite is other than DCSA facilities or corporate office space, must have the reliable ability to communicate over voice (cell phone preferred) and stable, capable internet connection Must be able to communicate complex technical ideas to a diverse customer base both verbally and in written form