Senior Okta / IAM Platform Administrator

ICF’s IT Modernization division is a rapidly growing, entrepreneurial, technology department seeking a Senior Okta / IAM Platform Administrator to support upcoming needs with our federal customers. Our IT Modernization division is an information technology and management consulting department that offers integrated, strategic solutions to its public and private-sector clients. ICF has the expertise, agility, and commitment to design, build, and operate high-performance IT engines to support all aspects of our client’s business.At ICF, we are fearless in finding new ways to solve problems, relentlessly making sure it pays off for our clients and committed to making a positive change in the world. Join our community of management consultants, mission-driven technologists, data scientists, innovation researchers, CIO strategists, and public health researchers & evaluators to challenge the status quo. As we continue to expand our services and to support this growth, we are looking for a Senior Okta / IAM Platform Administrator to join our Digital Modernization Division. We provide technical assistance services to US Civilian Federal Agencies and their partners, such as Health and Human Services, the Food and Drug Administration, and the Centers for Disease Control and Prevention (CDC); at ICF, we are fearless in finding new ways to solve problems, relentless in making sure it pays off for our clients and committed to making a positive change in the world. Join our community of Enterprise Architects, mission-driven technologists, data scientists, innovation researchers, CIO strategists, and public health researchers & evaluators to challenge the status quo. General DescriptionICF's digital transformation and IT modernization division is seeking a Senior Okta / IAM Platform Administrator to join our team of experts. The senior Okta administrator will support various Okta organizations, in addition to providing engineering and technical administrative support to the on-going consolidation efforts of multiple Okta instances managed by various team into a centralized Okta practice owned and managed by our client.What you’ll be doing (Responsibilities/Day to Day):

Administer and utilize IAM (Identity and Access Management) systems to enable clients to protect against digital identity risks.

Design, configure, deploy, and support comprehensive single-sign-on, MFA, user management, workflow, and mobile integrations to all appropriate cloud services.

Integrate customer applications with SSO solutions and multiple IdPs using SAML, OpenID, Oath, LDAP and other protocols.

Manage and maintain Directory integrations using Okta LDAP Agents in addition to HSPD-12/PIV integrations.

Stand up new Okta organizations as required by the customer and migrate Okta orgs from other divisions into centralized Okta platform.

Leverage and expand the customer's implementation of Okta's Identity Lifecycle, Workflow Automation, and Application Integration Platform

Manage platform domain and site certificates including currently configured identity providers.

Plan, design, and implement domain related customization to email templates, branding, directory profiles, and others as requested by the customer and security team.

Perform routine maintenance of LDAP Agents along with executing agents’ passwords rotations.

Implement network zoning for Okta organizations and associated applications based on customer requirements.

Support and administer other SaaS platforms such as GitHub, M365, or Atlassian tool suite as needed.

Some work will be required to be performed at a client site in Rockville, MD.

Basic/Required Qualifications

5+ years of experience administering enterprise scale server environments; including Linux systems, TCP/IP networking, scripting language(s) such as bash, and MySQL scripts.

5+ years of experience with IAM technologies and solutions; protocols such as SSO/federated authentication methods (SAML, OIDC) and their components; SCIM and JIT provisioning and integrating applications with SSO solutions and multiple IdPs using SAML; OpenID, Oath, LDAP, MS Active Directory, etc.; and legacy authentication methods such as Kerberos and Header authentication.

3+ years of experience with Okta IAM administration and engineering – including development/coding in Okta and associated APIs; OKTA AD Agents, OKTA connectors, custom rules, workflows, automations, and certification

Strong analytical/problem solving and troubleshooting skills.

Strong communication skills, both written and verbal; able to document architecture diagrams, and present IAM/SSO concepts to clients with various levels of technical understanding.

Self-motivated team player who takes ownership of projects and tasks, and able to learn new technologies.

Green card holder or US Citizenship is required due to federal contract requirements.

Must be able to obtain a US Public Trust clearance.

MUST RESIDE IN THE United States (U.S.) and the work MUST BE PERFORMED in the United States (U.S.), as this work is for a federal contract and laws do apply .

Preferred Skills

Okta Certified Administrator

Okta Certified Consultant

Experience administering Atlassian, GitHub, M365, or other platform systems/solutions

DevOps/system administration and cloud IAM experience in AWS or other cloud

#DMD#Indeed#Li-CC1Working at ICFWorking at ICF means applying a passion for meaningful work with intellectual rigor to help solve the leading issues of our day. Smart, compassionate, innovative, committed, ICF employees tackle unprecedented challenges to benefit people, businesses, and governments around the globe. We believe in collaboration, mutual respect, open communication, and opportunity for growth.We can only solve the world's toughest challenges by building an inclusive workplace that allows everyone to thrive. We are an equal opportunity employer, committed to hiring regardless of any protected characteristic, such as race, ethnicity, national origin, color, sex, gender identity/expression, sexual orientation, religion, age, disability status, or military/veteran status. Together, our employees are empowered to share their expertise and collaborate with others to achieve personal and professional goals. For more information, please read our EEO & AA policy (https://www.icf.com/legal/equal-employment-opportunity) .Reasonable Accommodations are available, including, but not limited to, for disabled veterans, individuals with disabilities, and individuals with sincerely held religious beliefs, in all phases of the application and employment process. To request an accommodation please email icfcareercenter@icf.com and we will be happy to assist. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations. Read more about non-discrimination: Know Your Rights (https://www.eeoc.gov/sites/default/files/2022-10/EEOCKnowYourRightsscreenreader1020.pdf) and Pay Transparency Statement (https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp%20EnglishformattedESQA508c.pdf) .Pay Range - There are multiple factors that are considered in determining final pay for a position, including, but not limited to, relevant work experience, skills, certifications and competencies that align to the specified role, geographic location, education and certifications as well as contract provisions regarding labor categories that are specific to the position. The pay range for this position is :$85,153.00 - $144,760.00Maryland Remote Office (MD99)Need help? We're here:ICFCareerCenter@icf.comAbout ICFICF is a global consulting and technology services company with approximately 9,000 employees, but we are not your typical consultants. At ICF, business analysts and policy specialists work together with digital strategists, data scientists and creatives. We combine unmatched industry expertise with cutting-edge engagement capabilities to help organizations solve their most complex challenges. Since 1969, public and private sector clients have worked with ICF to navigate change and shape the future. Learn more at icf.com (https://c212.net/c/link/?t=0&l=en&o=3731098-1&h=2556622195&u=https%3A%2F%2Fwww.icf.com%2F&a=icf.com) .