Okta & IGA Engineer – Onboarding & BAU Support

U3 INFOTECH PTE. LTD.

Role Overview

We are looking for an experienced Okta & IGA Engineer to manage application onboarding, SSO/MFA integrations, Identity Governance, custom automation, and Tier 2/3 BAU support for enterprise IAM environments.

Key Responsibilities

  • Onboard SaaS, cloud, and internal applications onto Okta.
  • Configure and troubleshoot SSO/MFA using SAML 2.0, OAuth 2.0, and OIDC.
  • Implement Agentless SSO and header-based authentication for legacy applications.
  • Develop automation and integrations using Okta APIs, Inline Hooks, and lifecycle workflows.
  • Configure Active Directory, Service Accounts, SPNs, and Kerberos authentication.
  • Execute Access Certification Campaigns using Okta Identity Governance (OIG) or other IGA platforms.
  • Provide Tier 2/3 production support, troubleshooting authentication, directory sync, token, and access issues.
  • Collaborate with application, infrastructure, security, and business teams throughout the SDLC.

Requirements

  • Enterprise IAM experience, with strong hands-on Okta experience.
  • Strong knowledge of Okta SSO, lifecycle management, authorization servers, SAML, OAuth 2.0, and OIDC.
  • Experience with IGA/access certification campaigns.
  • Hands-on experience with Agentless SSO, Kerberos, AD, and Network Zones/IdP routing.
  • Programming experience in JavaScript/Node.js, Python, Java, C#, or Go.
  • Experience with REST APIs, JSON, token validation, and automation.
  • Strong troubleshooting and stakeholder management skills.
  • Okta certification (Professional, Administrator, Consultant, or Developer) preferred/required.

Please refer to U3’s Privacy Notice for JobApplicants/Seekers at https://u3infotech.com/privacy-notice-job-applicants/ . When youapply, you voluntarily consent to the collection, use and disclosure of yourpersonal data for recruitment/employment and related purposes.

How to apply

To apply for this job you need to authorize on our website. If you don't have an account yet, please register.