IT Engineer (Okta)

• Design, configure, and maintain Okta tenants, including Universal Directory, Lifecycle Management, and Adaptive MFA policies
• Plan and execute user migration waves (bulk provisioning, group/attribute mapping, phased cutover) for a global user base
• Build and troubleshoot SSO integrations using SAML, OIDC, and SCIM across a range of SaaS and on-prem applications
• Develop and maintain Okta Workflows for automated provisioning/deprovisioning and identity life cycle events
• Manage API-based integrations using Oktas Management and Authentication APIs
• Support Entra ID (Azure AD) administration - conditional access policies, app registrations, enterprise applications, and hybrid identity (Azure AD Connect/Entra Connect)
• Contribute to device and endpoint management via Microsoft Intune (MDM/MAM policies, compliance profiles, conditional access integration)
• Support cutover activities, rollback planning, and post-migration validation/testing across regions
• Ensure IAM configurations align with security best practice, least-privilege principles, and compliance requirements
• Produce clear technical documentation for configurations, workflows, migration runbooks, and integration patterns

Tech Stack/Skills Required

Okta Universal Directory, Lifecycle Management, Okta Workflows, MFA/Adaptive MFA, SAML/OIDC/SCIM, Okta API, Access Gateway (desirable)

Entra ID Conditional Access, App Registrations, Enterprise Apps, PIM, Identity Protection

Azure AD Hybrid identity, Azure AD Connect/Entra Connect, directory sync, group/role management

Intune Device compliance policies, MDM/MAM, conditional access integration, app deployment

Migration Large-scale user/identity migration planning, bulk provisioning, cutover/rollback strategy

General Identity federation concepts, REST APIs, Scripting (PowerShell/Python desirable), security/compliance awareness

• Proven track record delivering Okta implementations or large-scale migrations (ideally 500+ users) in an enterprise environment
• Experience working on global rollouts, coordinating across regions/time zones
• Solid working knowledge of Microsofts identity stack (Entra ID/Azure AD and Intune)
• Comfortable working independently in a remote-first, contract capacity
• Strong communicator, able to document and explain technical decisions to both technical and non-technical stakeholders
• Okta or Microsoft certifications (eg Okta Certified Professional, SC-300) advantageous but not essential

The Role We re looking for an experienced Okta Engineer to join a large-scale identity migration project, moving ~1,000 users globally onto a modernised identity and access management (IAM) platform. you'll be hands-on with Okta configuration, integration, and migration work, while also supporting the wider Microsoft identity estate (Entra ID, Azure AD, Intune). This is a great opportunity for a specialist who wants to work at the sharp end of an enterprise-scale IAM rollout, with autonomy and a clear scope of delivery. Project Context * Global migration covering approximately 1,000 users across multiple regions/time zones * Involves coexistence and cutover planning between existing identity systems and the target Okta/Entra environment * Requires careful sequencing to minimise disruption to end users, applications, and access during migration waves