Senior Okta IAM Engineer

Client: TCS | Engagement: Full-time | Work mode: ONSITE | Experience: 8-10 | Publisher job id: JOB-000415

Role Overview

The Senior IAM Engineer is responsible for designing, implementing, and supporting enterprise Identity and Access Management (IAM) solutions with a primary focus on Okta application integrations, Single Sign-On (SSO), and Multi-Factor Authentication (MFA). This role partners with application owners, security teams, infrastructure teams, and business stakeholders across Cardinal Health to onboard enterprise applications to Okta, expand MFA adoption, and strengthen the organization's identity security posture. The position plays a key role in the enterprise MFA expansion initiative, driving the integration of both cloud and on-premises applications behind Okta SSO and MFA while ensuring compliance with security, audit, and regulatory requirements.

Key Responsibilities:

Lead the design, implementation, and support of application integrations with Okta using SAML 2.0, OpenID Connect (OIDC), OAuth 2.0, and other federation protocols.

Collaborate with internal application teams, vendors, and business stakeholders to onboard applications to Okta Single Sign-On (SSO) and Multi-Factor Authentication (MFA).

Analyze application authentication requirements and develop secure identity integration solutions aligned with enterprise IAM standards.

Configure and troubleshoot Okta application integrations, authentication policies, sign-on policies, and lifecycle management processes.

Serve as a subject matter expert (SME) for Okta authentication, federation, and access management capabilities.

Support enterprise-wide MFA expansion initiatives by identifying, prioritizing, and integrating applications into the centralized Okta MFA platform.

Design and implement adaptive and risk-based authentication controls to improve security while maintaining a positive user experience.

Partner with Security Architecture and Cybersecurity teams to enforce identity security standards and Zero Trust principles.

Design, develop, and maintain scalable IAM solutions and infrastructure-as-code (IaC) deployments using Terraform and Okta platforms.

Automate application onboarding, configuration management, and provisioning workflows where applicable.

Ensure IAM solutions comply with SOX, audit, regulatory, and corporate security requirements.

Conduct end-to-end testing of application integrations, SSO configurations, MFA workflows, and authentication policies.

Troubleshoot complex authentication, federation, and user access issues.

Required Skills:

Experience implementing and supporting SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and federation technologies.

Experience integrating enterprise applications with SSO and MFA solutions.

Understanding of Role-Based Access Control (RBAC), lifecycle management, and identity governance concepts.

Experience working with Infrastructure as Code (Terraform preferred).

Strong troubleshooting and analytical problem-solving skills.

Excellent communication and stakeholder management skills.

Qualifications

• 5+ years of experience in Identity and Access Management (IAM).

• 3+ years of hands-on experience administering and engineering solutions within Okta.

• Preferred Skills:

• Okta Certified Administrator and/or Okta Certified Professional.

• Experience supporting large-scale MFA transformation or identity modernization initiatives.

• Experience within regulated environments supporting SOX compliance requirements.

• Exposure to Identity Governance & Administration (IGA) platforms.

• Familiarity with Zero Trust security frameworks and modern authentication strategies.