Own the identity backbone of a global company. As an IAM Systems Administrator II, you will run our Okta tenant and build the automation that governs employee access from onboarding to offboarding. You will be our East Coast presence in our Waltham, MA or Bethesda, MD office, working a hybrid schedule with three in-office days per week on East Coast hours. You will work closely with Security, Infrastructure, and Corporate Engineering while supporting a global team, so independence and Okta Workflows expertise matter.

What You'll do:

• Administer our Okta tenant, including Universal Directory, group rules, application provisioning, policy frameworks, and lifecycle management
• Build, maintain, and monitor Okta Workflows that power Joiner-Mover-Leaver processes, role transitions, and automated de-provisioning for employees and contractors
• Integrate and optimize identity pipelines and API connectors across Google Workspace, Slack Enterprise, ServiceNow, and Microsoft Entra ID
• Configure SSO integrations using SAML 2.0 and OIDC, and enforce adaptive MFA, Okta FastPass, device trust, and zero-trust security policies
• Resolve Tier 2/3 escalations for identity anomalies, sync failures, workflow bugs, and third-party SaaS federation issues
• Support audits by monitoring Okta System Logs, assisting with access recertifications, and producing reports aligned to SOC 2 and ISO 27001
• Partner with leaders and employees at our East Coast offices, delivering professional, responsive support
• Maintain architecture diagrams, API schemas, integration runbooks, and escalation procedures

What you bring:

Must-Have

• 3+ years of IT systems administration or IAM experience, including 2+ years of hands-on Okta administration in an enterprise environment
• Administrative proficiency in enterprise SaaS and collaboration systems, such as productivity suites (e.g., Google Workspace, Microsoft 365), messaging platforms (e.g., Slack, Microsoft Teams), and directory services (e.g., Microsoft Entra ID, Active Directory)
• Hands-on experience building and troubleshooting multi-step automation in Okta Workflows or a similar engine (e.g., Workato, BetterCloud)
• Working knowledge of SAML 2.0, OpenID Connect (OIDC), OAuth 2.0, SCIM, and LDAP
• Proven ability to troubleshoot complex multi-system integration issues and articulate identity requirements clearly to cross-functional teams, with the customer service skills and professionalism to work with executives and the ability to work independently as the on-site IT identity expert

Preferred

• Administration experience with Google Workspace and Slack Enterprise Grid
• Practical experience with REST APIs (Postman or cURL, JSON, error handling, and rate limits), and scripting with PowerShell, Python, or Bash
• Experience with Microsoft Entra ID (Azure AD sync, Conditional Access) and ServiceNow (ITSM and Request Management)
• Okta Certified Administrator or Consultant, Okta Workflows specialization, Microsoft SC-300, CompTIA Security+, or experience supporting SOC 2, HIPAA, or ISO 27001 compliance

#LI-AS1

#LI-Hybrid