> Markdown version of [/jobs/ext/2629237-it-engineer-ii-iam](https://www.wearedevelopers.com/jobs/ext/2629237-it-engineer-ii-iam). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT Engineer II - IAM - **Company:** Judi Health - **Location:** Denver, CO, United States - **Experience:** Experienced - **Salary:** $92,000.0 - $115,000.0 - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Application Integration Architecture, Systems Engineering, Microsoft Azure, Bash Shell, Software as a Service, Cloud Computing, Human Resources Information System (HRIS), Identity and Access Management, Python (Programming Language), Microsoft Office, OAuth, OpenID, Windows PowerShell, Role-Based Access Control, Security Assertion Markup Language (SAML), Software Systems, User Provisioning Software, Google Cloud, Cloud Platform System, Okta, Information Technology, Deployment Automation - **Published:** August 11, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=a0c87ca03c41c777 ## About the Role * 4-6+ years of experience in IT engineering, systems administration, identity and access management, or equivalent roles * Proven ability to independently resolve complex technical issues and deliver end-to-end solutions * Advanced experience administering and supporting Okta Identity Cloud * Hands-on experience designing and implementing role-based access control (RBAC) models and access governance processes * Experience developing and maintaining Okta Workflows for identity automation and lifecycle management * Experience implementing and administering Okta Identity Governance, including access requests, certifications, entitlement management, and lifecycle governance * Strong experience managing: * Identity and access management platforms * User provisioning and deprovisioning processes * Endpoint management and device lifecycle operations * SaaS application deployment and governance * Demonstrated experience leading medium-scale IT projects involving multiple systems or business stakeholders * Ability to partner effectively with Security, Engineering, Compliance, and Business teams * Proficiency administering Office 365 and supporting macOS in a remote-first environment * Experience deploying, evaluating, and operationalizing new software solutions * Working knowledge of at least one major cloud platform (AWS, Azure, or Google Cloud preferred) * Strong scripting and automation skills using Bash, PowerShell, Python, or similar languages * Experience mentoring junior engineers or providing technical guidance to peers * Comfortable participating in on-call or off-hours support rotations, * Okta Certified Professional, Administrator, or Identity Governance certifications * Experience with SCIM provisioning, SAML, OIDC, OAuth, and modern identity standards * Experience performing access reviews, audit support, and compliance-focused identity governance activities * Experience integrating identity platforms with HRIS, MDM, ticketing, and security systems * Experience supporting healthcare, financial services, or other regulated environments All employees are responsible for adherence to the Judi Health Code of Conduct including the reporting of non-compliance. This position description is designed to be flexible, allowing management the opportunity to assign or reassign duties and responsibilities as needed to best meet organizational goals. ## Description The IT Engineer II is a mid-level technical contributor responsible for independently delivering complex IT solutions and leading medium-scale initiatives that improve reliability, security, and user experience. This role serves as a key escalation point for IT Engineer I staff, drives cross-functional projects, and applies advanced technical expertise across identity and access management, endpoint management, SaaS platforms, and cloud-integrated systems. The IT Engineer II is expected to influence standards, mentor junior engineers, and proactively identify opportunities for automation, access governance, and process improvement. This role serves as a subject matter expert for identity lifecycle management, role-based access controls, and Okta platform administration. Position Responsibilities: * Serve as a senior escalation point for complex or high-impact end-user and systems issues beyond Helpdesk and IT Engineer I scope * Lead and deliver medium-to-large IT projects involving identity management, endpoint management, security controls, and SaaS platforms * Design, implement, and maintain scalable onboarding, offboarding, and identity lifecycle management processes * Administer and enhance Okta Identity Cloud, including authentication, authorization, application integrations, and access policies * Design and maintain role-based access control (RBAC) frameworks to ensure appropriate access governance and least-privilege security models * Develop and maintain Okta Workflows to automate provisioning, deprovisioning, approval processes, and operational tasks * Configure and support Okta Identity Governance processes, including access requests, certifications, entitlement reviews, and lifecycle governance controls * Partner with Security, Compliance, Engineering, and Business stakeholders to implement access governance and security best practices * Evaluate, test, and deploy new software solutions, acting as the technical owner throughout rollout and adoption * Develop and maintain technical documentation, runbooks, knowledge articles, and access governance procedures * Identify recurring operational issues and implement systemic and automated solutions to improve efficiency and reduce risk * Mentor IT Engineer I team members and provide technical guidance across identity and access management disciplines * Contribute scripts and automation using Bash, PowerShell, Python, or similar languages * Participate in on-call or off-hours support rotations as required ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [What If We Designed Employee Experience Like a Customer Journey?](https://www.wearedevelopers.com/videos/1824-what-if-we-designed-employee-experience-like-a-customer-journey) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) - [Hosting a modern justice system](https://www.wearedevelopers.com/videos/332-hosting-a-modern-justice-system) ## Related Articles - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)