Job description
Job Family : Cyber Consulting Travel Required : Up to 10% Clearance Required : Ability to Obtain Public Trust What You Will Do: Our Cybersecurity Consultants are a team of business integrators with extensive consulting and industry experience who help our clients solve their complex business issues from strategy through execution. A career in an integrated team of developers and consultants provides the opportunity to grow and contribute to our clients' business issues every day, applying a collection of security spectrum capabilities, including security strategy and governance, IT risk, security technologies, and cybercrime and breach response. We are seeking a highly skilled and certified Senior Okta Engineer to lead the design, implementation, and optimization of Okta-based authentication services for a large, federated U.S. government agency.
This role is critical to modernizing identity and access management (IAM) across a complex, multi-tenant environment with stringent security and compliance requirements. The Okta Engineer will support a high-paced client environment. The Okta Engineer will be responsible for configuring and maintaining of Okta as cloud-based authentication platform and identity provider for federal clients in collaboration with other experienced Okta Engineers.
Responsibilities
- include, but are not limited to: Architect and deploy scalable Okta solutions for authentication, federation, lifecycle management, and identity governance across multiple domains and agencies.
- Design and implement SSO, MFA, and adaptive access policies aligned with federal security standards.
- Design and implement automated workflows aligned with identity governance, Integrate Okta with cloud and on-premise applications, including custom APIs and legacy systems.
- Collaborate with cybersecurity, infrastructure, and application teams to ensure seamless identity workflows.
- Monitor, troubleshoot, and optimize Okta performance and security posture.
- What You Will Need: Must be able to obtain and maintain a Federal or DoD “public trust”; candidates must receive approved adjudication prior to onboarding with Guidehouse.
- Candidates with an active public trust or suitability are preferred.
- Bachelor's degree from an accredited university.
- US Citizenship is contractually required.
- Minimum FIVE (5) years of experience in identity and access management, with at least THREE (3) years focused on Okta.
- Proven experience architecting and deploying Okta in federated environments with complex trust relationships.
- Deep understanding of SAML, OIDC, OAuth2, SCIM, and related identity protocols.
- Familiarity with federal compliance frameworks (e.g., FISMA, FedRAMP, NIST 800-53).
- Strong scripting and automation skills (e.g., PowerShell, Python, Okta APIs, Okta Workflows).
- Experience with Okta Identity Governance.
- Excellent communication and documentation abilities.
- Knowledge of Okta including features, integrations, and architecture in a full IAM stack.
- Experience configuring user authentication policies and application connections in Okta.
- Experience configuring and managing Multi-Factor Authentication (MFA) factors for Okta users, including Okta Verify, FIDO tokens, One-Time Passcodes, and RSA tokens.
- Experience troubleshooting Okta user authentication and application issues.
- Broad knowledge of cybersecurity threats and mitigating IT solutions.
- Experience developing cybersecurity policies.
- What Would Be Nice To Have: At least 2 current Okta certifications (e.g., Okta Certified Professional, Administrator, Consultant, Developer).
- Experience supporting Federal IT projects that integrate multiple IAM technologies.
- Additional relevant cybersecurity certifications (e.g., CompTIA Security+, CEH, CISSP, CISM).
- The annual salary range for this position is $113,000.00-$188,000.00.
Compensation
decisions depend on a wide range of factors, including but not limited to skill sets, experience and training, security clearances, licensure and certifications, and other business and organizational needs.
What We Offer
Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.
Benefits
- include: Medical, Rx, Dental & Vision Insurance Personal and Family Sick Time & Company Paid Holidays Position may be eligible for a discretionary variable incentive bonus Parental Leave and Adoption Assistance 401(k) Retirement Plan Basic Life & Supplemental Life Health Savings Account, Dental/Vision & Dependent Care Flexible Spending Accounts Short-Term & Long-Term Disability Student Loan PayDown Tuition Reimbursement, Personal Development & Learning Opportunities Skills Development & Certifications Employee Referral Program Corporate Sponsored Events & Community Outreach Emergency Back-Up Childcare Program Mobility Stipend About Guidehouse Guidehouse is an Equal Opportunity Employer–Protected Veterans, Individuals with Disabilities or any other basis protected by law, ordinance, or regulation.
- Guidehouse will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of applicable law or ordinance including the Fair Chance Ordinance of Los Angeles and San Francisco.
- If you have visited our website for information about employment opportunities, or to apply for a position, and you require an accommodation, please contact Guidehouse Recruiting at 1-571-633-1711 or via email at RecruitingAccommodation@guidehouse.com .
- All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodation.
- All communication regarding recruitment for a Guidehouse position will be sent from Guidehouse email domains including @guidehouse.com or guidehouse@myworkday.com .
- Correspondence received by an applicant from any other domain should be considered unauthorized and will not be honored by Guidehouse.
- Note that Guidehouse will never charge a fee or require a money transfer at any stage of the recruitment process and does not collect fees from educational institutions for participation in a recruitment event.
- Never provide your banking information to a third party purporting to need that information to proceed in the hiring process.
- If any person or organization demands money related to a job opportunity with Guidehouse, please report the matter to Guidehouse’s Ethics Hotline.
- If you want to check the validity of correspondence you have received, please contact recruiting@guidehouse.com .
- Guidehouse is not responsible for losses incurred (monetary or otherwise) from an applicant’s dealings with unauthorized third parties.
- Guidehouse does not accept unsolicited resumes through or from search firms or staffing agencies.
- All unsolicited resumes will be considered the property of Guidehouse and Guidehouse will not be obligated to pay a placement fee.
