> Markdown version of [/jobs/ext/1246766-okta-identity-provisioning-engineer](https://www.wearedevelopers.com/jobs/ext/1246766-okta-identity-provisioning-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Okta Identity & Provisioning Engineer

- **Company:** Info-Matrix Corporation
- **Location:** Harrisburg, PA, United States
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Active Directory, Audit Trail, Data Structures, Identity and Access Management, Lightweight Directory Access Protocols (LDAP), OAuth, Open Data Protocol, OpenID, SuccessFactors, Security Assertion Markup Language (SAML), SAP (Applications), SAP Human Resource Management Software, Single Sign-On, Okta, Test Scripts, Information Technology, SAP S/4HANA, SailPoint, Restful APIs, Workday
- **Published:** July 12, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=266c6f9f68ed8e2a

## About the Role

4+ years of identity and access management (IAM) engineering, including demonstrable, project-based hands-on Okta (Workforce Identity) experience.
*
Okta provisioning & lifecycle - hands-on Okta administration: SCIM provisioning, lifecycle management, attribute mapping, and group/role rules.
*
SSO protocols - working fluency with SAML, OIDC, and OAuth2, and directory integration (Active Directory / LDAP / Entra ID).
*
HR-sourced provisioning - experience provisioning identities from an authoritative HR/HCM source (e.g., SAP SuccessFactors, Workday, or equivalent).
*
U.S.-based and able to attend onsite, in-person meetings in Harrisburg, PA when requested (all work performed within the United States).

STRONGLY PREFERRED / NICE TO HAVE

*
SAP HR / SuccessFactors as identity source - experience mapping SAP employee-data attributes into Okta provisioning (the source data in these transitions is HR data from SAP).
*
SAP S/4HANA / API integration - familiarity with S/4HANA data structures and OData/REST APIs. A candidate who covers BOTH Okta provisioning and SAP S/4HANA integration is ideal.
*
Public-sector delivery - state or Commonwealth of Pennsylvania IT experience; multi-agency, governed, wave-based delivery environments.
*
Clearance eligibility - able to obtain and hold a U.S. Public Trust.

RELEVANT CERTIFICATIONS (PREFERRED)

*
Okta Certified Administrator
*
Okta Certified Consultant
*
Okta Certified Professional or Okta Certified Developer
*
Adjacent IAM: Microsoft Identity & Access Administrator (SC-300), SailPoint, or CISSP
*
SAP Certified Associate - SAP SuccessFactors Employee Central (HR data source, a plus)

## Description

Provisioning & lifecycle (SCIM) - design, build, and validate SCIM-based provisioning/deprovisioning and lifecycle management, sourcing employee identity data from SAP HR / HCM and other authoritative sources.
*
SSO & directory integration - implement SAML / OIDC / OAuth2 single sign-on and integrate Okta with agency applications and directories (Active Directory / LDAP / Entra ID) as needed.
*
Hands-on testing & remediation - provide hands-on support for testing, troubleshooting, and remediation during provisioning transitions; produce test plans, test scripts, and remediation logs.
*
Security & audit - enforce least-privilege access, audit logging, and compliance with client IAM governance and security policies.
*
Cutover & hypercare - support cutover readiness and post-go-live stabilization for the provisioning use case, validating continuity and triaging issues.


## Related Videos

- [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect)
- [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak)
- [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications)
- [What if your HR software adapted to you, not the other way around?](https://www.wearedevelopers.com/videos/100259-what-if-your-hr-software-adapted-to-you-not-the-other-way-around)
- [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue)
- [Migrating half a million users to a new payment service provider](https://www.wearedevelopers.com/videos/730-migrating-half-a-million-users-to-a-new-payment-service-provider)

## Related Articles

- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany)
- [Find a Developer Job: 12 Best Job Sites For Developers](https://www.wearedevelopers.com/magazine/165-find-a-developer-job-12-best-job-sites-for-developers)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Finding Jobs in Germany](https://www.wearedevelopers.com/magazine/375-finding-jobs-in-germany)
- [The Best Job Search Websites of 2025](https://www.wearedevelopers.com/magazine/368-the-best-job-search-websites-of-2025)