This role focuses heavily on OneLogin and Okta-based SSO, identity lifecycle automation, and secure integration

of SaaS applications. The ideal candidate is a true IAM subject-matter expert who thrives in collaborative, agile

environments and brings a strong culture-fit mindset alongside deep technical expertise.

KEY RESPONSIBILITIES

• Own and support enterprise IAM and SSO platforms, with a strong focus on OneLogin and Okta
• Design, implement, and maintain SSO integrations using SAML, OAuth/OIDC, SCIM, and API-based provisioning
• Integrate and manage identity for a large SaaS ecosystem (e.g., Google Workspace, Box, Slack, Zoom, Atlassian, etc.)
• Partner closely with engineering, security, and application teams to build and support middleware, APIs, and identity workflows outside of core applications
• Lead user lifecycle management, including onboarding, offboarding, access audits, and tenant-to-tenant migrations
• Act as an escalation point for Tier 2/3 IAM and SSO incidents, driving cross-functional incident response and root cause analysis
• Support compliance and security initiatives, including SCIM provisioning, audit readiness, and access reviews
• Document architectures, workflows, and troubleshooting steps to internal knowledge bases
• Participate in Agile-based project work, contributing to sprint planning, execution, and delivery
• Engage in skills assessment and technical evaluation processes as part of the team's ongoing maturity efforts

• 10+ years of experience in Identity and Access Management with deep hands-on expertise in OneLogin and/or Okta, including enterprise SSO ownership
• Proven SSO integration expertise - SAML, OAuth/OIDC, SCIM, APIs, and identity lifecycle automation across large SaaS environments
• Strong systems background (Linux + scripting/automation) with ability to partner cross-functionally, lead escalations, and operate in Agile environments

• Retirement Plan (401k, IRA)
• Health Care Plan

Equal Employment Opportunity:
The Company is an equal opportunity employer and does not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other protected characteristic under applicable law.

Employment Disclaimer:
This job description is not intended to create an employment contract. Employment with the Company is at-will, meaning employment may be terminated by either the employee or the Company at any time, with or without cause or notice, subject to applicable law.

Duties Subject to Change:
The Company reserves the right to modify, add, or reassign duties and responsibilities at any time based on business needs.

Confidentiality:
This position may require access to confidential or sensitive information. Employees are expected to maintain confidentiality and comply with all Company policies and applicable security requirements.