IAM (Identity & Access Management) Engineer (Okta / SailPoint)

This is a remote position.

• Employment Type: Contract
  
• Work Mode: Remote
  
• Location: Offshore
  
• Total Experience Required: 4 to 8 years
  
• Relevant Experience Required: 3+ years of dedicated implementation and configuration experience across enterprise IAM platforms (Okta or SailPoint)
  
• Mandatory Certification: Okta Certified Professional/Consultant or SailPoint Certified IdentityNow Engineer
  

• Configure and deploy core IAM framework modules, managing user onboarding pipelines, automated lifecycle states, and access certification governance campaigns.
  
• Design and maintain Single Sign-On (SSO) configurations, setting up federated cross-app connections, custom SAML 2.0 / OpenID Connect (OIDC) profiles, and OAuth authorization parameters.
  
• Build automated provisioning workflows, writing system rules, attribute transformations, and direct API connector scripts to manage directory feeds (Active Directory, HR systems).
  
• Implement adaptive Multi-Factor Authentication (MFA) policies, configuring context-aware security profiles, network geofencing metrics, and sign-on threshold parameters.
  
• Govern identity security and access access levels, structuring complex role-based access control (RBAC), attribute-based access control (ABAC), and least-privilege security lines.
  
• Collaborate with enterprise infrastructure teams to support secure connectivity with directory endpoints, internal databases, and downstream SaaS application rings.
  
• Lead update regression validations and patch cycles, auditing platform custom configurations across sandboxes to prevent authentication processing drops.
  

Requirements

• 4 to 8 years of core enterprise IT security experience, with 3+ dedicated years actively designing, building, and deploying software within Okta or SailPoint environments.
  
• Strong technical mastery of web identity languages (SAML, OIDC, OAuth), directory structures (LDAP, Active Directory), and SCIM provisioning protocol architectures.
  
• Deep structural understanding of zero-trust network principles, cloud application architectures, security boundary perimeters, and lifecycle tracking metrics.
  
• Mandatory certification: Okta Certified Professional/Consultant OR SailPoint Certified IdentityNow/IdentityIQ Engineer.
  

• Prior scripting proficiency utilizing JavaScript, Python, or PowerShell to extend platform workflows, automate bulk user transitions, or parse system API logs.
  
• Familiarity with Privileged Access Management (PAM) architectures like CyberArk or BeyondTrust.