EDUCATION AND EXPERIENCE

Associates or Bachelors Degree in Computer Science, or equivalent experience in related field, and 5+ years of related experience. Bachelors degree preferred.

ESSENTIAL DUTIES AND RESPONSIBILITIES

- Own and administer the enterprise Okta platform, including configuration, operations, governance, standards, support, and continuous improvement.
- Serve as the technical lead and escalation point for Okta, IAM platform issues, application access issues, integrations, outages, and platform changes.
- Administer Okta capabilities including Universal Directory, SSO, MFA, Lifecycle Management, group rules, profile mappings, authentication policies, application assignments, and admin roles.
- Design, configure, and troubleshoot Okta application integrations using SAML, OIDC, OAuth 2.0, SCIM, SWA, APIs, and Okta agents.
- Lead onboarding, migration, testing, deployment, and ongoing support of enterprise applications integrated with Okta.
- Maintain and troubleshoot identity flows between authoritative sources, Okta, Microsoft Entra ID, AWS IAM, IAM tools, and downstream applications.
- Administer Microsoft Entra ID identity controls related to enterprise applications, authentication, conditional access, groups, and identity security.
- Administer AWS IAM capabilities including users, roles, policies, permissions, federation, access keys, and identity-related logging.
- Support identity lifecycle processes for employees, contractors, vendors, privileged users, and other user populations.
- Support IAM governance processes including access reviews, entitlement reviews, role reviews, certifications, access exceptions, audit evidence, and compliance reporting.
- Lead non-human identity security efforts for service accounts, automation accounts, application identities, API accounts, cloud roles, certificates, secrets, and access keys.




- Identify and reduce identity risks related to excessive permissions, stale access, orphaned accounts, inactive accounts, privileged access, and long-lived credentials.
- Support privileged access processes including approvals, emergency access, credential rotation, privileged access reviews, and audit evidence.
- Monitor, triage, and investigate identity-related security alerts from Okta, Entra ID, AWS IAM, IAM tools, privileged access tools, SIEM, and related platforms.
- Support containment and remediation for identity-related incidents, including suspicious logins, account compromise, privilege misuse, cloud IAM misuse, and unauthorized access.
- Partner with Security Operations, Cloud, Infrastructure, HR, Application, and business teams to resolve identity and access issues.
- Develop and maintain IAM SOPs, runbooks, diagrams, application records, control documentation, and troubleshooting guides.
- Recommend improvements to strengthen identity security, reduce manual access work, and improve IAM operations.
- Participate in rotational on-call or escalation support as needed for IAM and identity-related security incidents.
- Perform other duties as assigned.

TECHNICAL COMPETENCIES (Knowledge, Skills & Abilities)

- Expert hands-on experience owning and administering Okta in an enterprise workplace.
- Strong experience with Okta SSO, MFA, Lifecycle Management, Universal Directory, application integrations, group rules, profile mappings, and authentication policies.
- Strong experience with IAM integration standards and protocols, including SAML, OIDC, OAuth 2.0, SCIM, SWA, APIs, and identity agents.
- Strong understanding of IAM governance, including least privilege, role-based access, access reviews, certifications, entitlement management, and segregation of duties.
- Working knowledge of Microsoft Entra ID and AWS IAM identity controls, including enterprise applications, conditional access, federation, roles, policies, and access keys.

📌 Senior Security Operations Engineer (Mumbai)
🏢 Kornferry
📍 Mumbai