> Markdown version of [/jobs/ext/2290496-zero-trust-security-engineer-okta](https://www.wearedevelopers.com/jobs/ext/2290496-zero-trust-security-engineer-okta). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Zero Trust Security Engineer - Okta

- **Company:** ASRC FEDERAL
- **Location:** Quantico, VA, United States (Remote available)
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Active Directory, Amazon Web Services, Application Integration Architecture, Software as a Service, Cyber Security, System Configuration, Multi-Factor Authentication, Identity and Access Management, Python (Programming Language), Lightweight Directory Access Protocols (LDAP), OAuth, OpenID, Windows PowerShell, Azure Active Directory, Zero Trust Network Access, Security Assertion Markup Language (SAML), Signalling Connection Control Part (SCCP), Security Information and Event Management, Single Sign-On, User Provisioning Software, Web Applications, Scripting, Cloud Platform System, Okta, SC Clearance, HR Software, Splunk
- **Published:** August 29, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9125104/zero-trust-security-engineer-okta

## About the Role

* Minimum of 5 years of hands-on experience administering, configuring, and supporting the Okta Identity Cloud platform in an enterprise or federal environment.
 * IAM Expertise: Strong understanding of identity-centric security, directory services (Active Directory, LDAP), and modern federation protocols (SAML 2.0, OIDC, OAuth 2.0).
 * Active Top-Secret Clearance REQUIRED, eligible to be upgraded to TS/SCI
 * Must meet 8570 certification requirements at the time of hire. IAT Level II (e.g., Security+ CE, CCNA Security, CySA+, GICSP, GSEC, SCCP or higher tiered 8570 certification
 * Bachelor's Degree, in Cybersecurity, Information Systems Management or a related field or an equivalent combination of military service and/or at least five (5) years of significant, relevant work experience
 * Desired Certifications: Official Okta certifications are highly desired:

 * Okta Certified Professional
 * Okta Certified Administrator
 * Okta Certified Consultant or Okta Certified Developer (plus), * This is primarily a Telework position with a requirement to be onsite at least two (2) days a week or as needed at Quantico Marine Corps Base VA. Additional onsite time may be required during initial onboarding and program integration.
 * If alternate worksite is other than DCSA facilities or corporate office space, must have the reliable ability to communicate over voice (cell phone preferred) and stable, capable internet connection
 * Must be able to communicate complex technical ideas to a diverse customer base both verbally and in written form

We invest in the lives of our employees, both in and out of the workplace, by providing competitive pay and benefits packages. Benefits offered may include health care, dental, vision, life insurance; 401(k); education assistance; paid time off including PTO, holidays, and any other paid leave required by law. The salary offered will depend on several factors including, but not limited to, relevant experience, skills, education, geographic location, internal equity, business needs, and other factors permitted by law. Posted pay ranges are a general guideline only and are not a guarantee of compensation or salary.

## Description

ASRC Federal is actively hiring an Intermediate Okta Engineer in support of our Defense Counterintelligence Security Agency (DCSA) program based out of Quantico, VA., We are seeking a skilled and highly motivated Identity and Access Management (IAM) professional to join our dynamic cybersecurity team. The ideal candidate will be responsible for the administration, configuration, maintenance, and integration of our Okta Identity Cloud platform, ensuring secure, seamless, and compliant access to DCSA applications and resources.

This role will focus on leveraging Okta's core features, including Single Sign-On (SSO), Multi-Factor Authentication (MFA), Lifecycle Management (LCM), Universal Directory, and Okta Workflows-to support our Zero Trust architecture and secure our hybrid workforce.

This is primarily a Telework position with a requirement to be onsite at least two (2) days a week or as needed at Quantico Marine Corps Base VA. Additional onsite time may be required during initial onboarding and program integration., Solution Administration and Configuration

 * Manage, configure, and maintain the daily operations of the Okta Identity Cloud platform, including Universal Directory, Single Sign-On (SSO), and Multi-Factor Authentication (MFA).
 * Develop, implement, and enforce granular sign-on policies, adaptive MFA, and application-level access controls.

Lifecycle Management & Automation

 * Design, implement, and troubleshoot automated provisioning, deprovisioning, and user lifecycle workflows (Lifecycle Management) across various target applications.
 * Utilize and configure Okta Workflows or scripting (e.g., PowerShell, Python) to automate manual IAM tasks and onboarding processes.

Directory & Application Integration

 * Connect and integrate Okta with authoritative source directories (Active Directory, LDAP, HR systems) and cloud environments (AWS, Azure AD).
 * Onboard and integrate SaaS, web-based, and legacy on-premise applications using SAML, OIDC, WS-Fed, and SCIM protocols.

Security & Compliance Integration

 * Collaborate with cybersecurity teams to integrate Okta system logs with Security Information and Event Management (SIEM) tools (e.g., Splunk) for security monitoring and audit reporting.
 * Support the implementation of Zero Trust architecture by aligning Okta authentication policies with endpoint posture assessment tools (e.g., Palo Alto GlobalProtect, crowd-sourced agents).

Troubleshooting and Support

 * Serve as the Tier-2/Tier-3 Subject Matter Expert (SME) for Okta-related issues, troubleshooting authentication failures, provisioning errors, federation mismatches, and user access issues.

Documentation and Training

 * Create and update high-quality engineering runbooks, standard operating procedures (SOPs), architecture diagrams, and user guides.
 * Train and mentor junior support technicians and help desk staff on basic Okta troubleshooting and identity lifecycle actions.


## Related Videos

- [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect)
- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue)
- [Get security done: streamlining application security with Aikido](https://www.wearedevelopers.com/videos/1638-get-security-done-streamlining-application-security-with-aikido)
- [Advanced Cypress: custom assertions and tasks](https://www.wearedevelopers.com/videos/790-advanced-cypress-custom-assertions-and-tasks)

## Related Articles

- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [Highest Paying Tech Companies in Europe](https://www.wearedevelopers.com/magazine/162-highest-paying-tech-companies-in-europe)
- [Find a Developer Job: 12 Best Job Sites For Developers](https://www.wearedevelopers.com/magazine/165-find-a-developer-job-12-best-job-sites-for-developers)
- [How Much Does a Software Engineer Make? Realistic Software Engineering Salaries](https://www.wearedevelopers.com/magazine/425-how-much-does-a-software-engineer-make-realistic-software-engineering-salaries)