Systems Engineer II

Job Description

CWS is seeking a Systems Engineer II to leverage engineering best practices within design, administration, installation and support for systems/server, software and security to include Okta Support.

The contractor will support OFR's efforts to:

• Coordinate and/or perform additions and changes to operating systems and applications; includes investigation, analysis, recommendation, configuration, installation, and testing of new software and applications.
• Provide direct support in the day-to-day operations on operating systems and software, including the evaluation of system utilization, monitoring response time and primary support for detection and correction of operational problems.
• Will be responsible for securing user applications, application integrations, deployment automation, and improving security using Okta solutions.
• Will play a crucial role in implementing Identity and Access Governance solutions, providing advanced authentication, overseeing privileged access management, and ensuring secure information distribution.
• Perform tasks including but not limited to User Lifecycle Management, security policy frameworks, and advanced directory integration for cloud and on-premises access.
• Use the Okta Policy framework to control user access, map identity attributes and data transformations using Universal Directory, and troubleshoot issues.

Key Tasks and Responsibilities

Experience with Okta includes installation, configuration, and migrations.

Troubleshoot advanced problems within the Okta IdP by using tools such as SAML tracer, Fiddler, and other similar tools.

Integrate applications with SAML, OpenID Connect, RADIUS and Oauth.

Integrate applications with Multi Factor/Password less Authentication

Provide Proof of Concepts and Pilots for Advancing Zero Trust integration infrastructure.

Support of primarily Microsoft 365 stack (Exchange Online (hybrid), Intune, Entra ID, Teams, OneDrive)

Systems Administration: Knowledge of Microsoft Windows Server Platforms, Active Directory, Group Policy as well as basic MS SQL administration.

Ensure that all Group Policy Management (GPM) changes are controlled and documented.

Measure and monitor metrics, identify trends, and report standings and findings to management and other stakeholders.

Participating in meetings with executives to discuss technical issues and propose solutions.

Collaborating with other members of the engineering team to design new features or improve existing ones.

Escalate issues to vendor and third-party entities, as necessary.

Other operational support duties as assigned.

Experience leading engineering projects from start to finish.

Provide support to technical leaders by coordinating activities pertaining to the development, documentation and maintenance associated with changes to the system.

Ability to work and deliver on short response tasking in a fast paced environment.

Ability to effectively manage several projects simultaneously while balancing resources

Ability to work in a dynamic team environment, adaptable to change, and thrive in an atmosphere that requires trust, initiative, creativity, and strong problem-solving skills.

Strong communication skills with customers over phone, email, or ticketing system.

Ability to work well in a constantly evolving work environment.

Excellent communication and organizational skills; able to articulate intent, frame requirements, set priorities, develop practical methods, and align resources to meet goals.
Education & Experience

10 or more years of IT experience

3+ direct years of experience engineering and providing operations support for Okta SSO solutions.

Experience as a remote worker demonstrating time management and self-discipline with cultural change management and Agile mindset.

Hands-on experience migrating applications to implement Okta.

Strong knowledge of the different identity and access management (IAM) concepts, technologies, and authentication protocols.

Intimately familiar with IAM related protocols such as SAML, SPML, XACML, SCIM, OAuth, OIDC, OpenID and REST APIs, and other security interfaces.

Strong experience with Directories, SSO, Federation, Delegated administration, API gateways, SOA services.

An understanding of Zero Trust concepts.

Active Directory including but not limited to:

o Microsoft Active Directory/Azure Active Directory (EntraID)

o Privileged access management (PAM) systems such as Beyond Trust

o Hands-on experience with cloud computing services (O365/Microsoft Azure/AWS).

o Experience with SailPoint IdentityIQ integration and operations.

o Experience with network architecture.

o Experience with Windows PowerShell scripting.

Certifications

Okta Certified

Security Clearance

Public Trust High (Tier 4/BI) Risk Level

Must be a US citizen

Other (Travel, Work Environment, DoD 8570 Requirements, Administrative Notes, etc.)

Remote or DC

by Jobble

---