> Markdown version of [/jobs/ext/1505832-senior-identity-engineer](https://www.wearedevelopers.com/jobs/ext/1505832-senior-identity-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Identity Engineer - **Company:** Tyler Technologies - **Location:** Plano, TX, United States (Remote available) - **Experience:** Expert - **Salary:** $102,718.0 - $140,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Access, JavaScript (Programming Language), Active Directory, Active Directory Federation Services, Agile Methodology, Amazon Web Services, Apple Mac Systems, JIRA, User Authentication, Microsoft Azure, Linux, Multi-Factor Authentication, Human Resources Information System (HRIS), Identity and Access Management, JSON, Python (Programming Language), OAuth, OpenID, Windows PowerShell, Scrum Methodology, Azure Active Directory, Runbook, Security Assertion Markup Language (SAML), Kronos, Scripting, Okta, Build Management, Information Technology, Terraform, Serverless Computing - **Published:** July 30, 2026 - **Apply:** https://jobs.mitalent.org/job-seeker/job-details/JobCode/398304425 ## About the Role Minimum 5 years of IT experience with a meaningful portion dedicated to identity and access management in a mid-to-large sized enterprise. Hands-on experience with Okta --Workforce Identity, Universal Directory, Lifecycle Management, Workflows, Access Gateway, Okta Identity Engine. Hands-on experience with Microsoft Entra ID - Conditional Access, app registrations, enterprise apps, PIM, B2B, hybrid join. Active Directory engineering experience - multi-domain/multi-forest, Group Policy, Sites & Services, ADFS, AD/Entra Connect, PowerShell. Working knowledge of AWS IAM, IAM Identity Center, AWS Managed AD, and federation patterns. Production experience designing and operating SAML 2.0, OIDC/OAuth 2.0, SCIM 2.0, and WS-Fed integrations. Experience automating identity lifecycle (Joiner / Mover / Leaver) from an HRIS source. Strong scripting/automation skills: PowerShell (required) and at least one of Python, JavaScript, Terraform, and/or JSON. Experience with MFA platforms and modern authenticators (Okta Verify, Microsoft Authenticator, FIDO2 / hardware-based keys). Familiarity with compliance frameworks: NIST CSF, SOC 2, SOX, CJIS, FedRAMP. Excellent written and verbal communication and documentation discipline. Working knowledge of Windows, Linux and macOS. ## Description Plano, Texas | Yarmouth, Maine | Troy, Michigan | Latham, New York | Remote Travel 0-5% Responsibilities Serve as the technical owner and subject matter expert for Okta (Workforce Identity + Identity Governance), Microsoft Entra ID, and Active Directory. Architect and operate the UKG Okta AD identity lifecycle pipeline, including UKG Pro connector validation, attribute mapping, Universal Directory profile design, and Okta AD Agent write-back. Design and build Okta Workflows for Joiner / Mover / Leaver automation, including SCIM provisioning, HTTP connector flows, and migration of Azure Runbooks into Okta Workflows. Engineer application bridges for downstream targets Okta does not natively integrate, such as with Lambda and Azure Functions. Ownership of SSO strategy (SAML, OIDC, SCIM, Federation), application onboarding standards, and the Okta application catalog. Design and maintain authentication and access policies. Multifactor Authentication, adaptive risk-based authentication, network zones and authenticator enrollment policies. Lead Active Directory hygiene and remediation: stale account cleanup, group rationalization, GPO linkage reviews, SPN management, OU placement standards, and contractor census alignment. Build and operate identity dashboards across AD / Okta / Entra ID for operational visibility and license utilization. Maintain non-production tenants for testing, validation, and change rehearsal prior to production cutover. Mentor IT Analysts and Infrastructure Engineers across Okta, Entra ID, and AD. Participate in Agile/Scrumban ceremonies using JSM/Jira as the system of record. Document and maintain architecture diagrams, configuration baselines, runbooks, SOPs, and training paths. Participate in IT projects, change management, incident response, and on-call rotation for identity platform issues. ## Related Videos - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) - [Improving quality with Agentic AI with Rovo Dev and Xray](https://www.wearedevelopers.com/videos/2005-improving-quality-with-agentic-ai-with-rovo-dev-and-xray) - [Tips and Tricks for Working with JSON](https://www.wearedevelopers.com/videos/1229-tips-and-tricks-for-working-with-json) - [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies) - [Collaboration Quantified: Lessons from Open Source Developer Networks](https://www.wearedevelopers.com/videos/1422-collaboration-quantified-lessons-from-open-source-developer-networks) - [Introducing JSON Structure](https://www.wearedevelopers.com/videos/100219-introducing-json-structure) ## Related Articles - [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)