> Markdown version of [/jobs/ext/2713654-iam-engineer](https://www.wearedevelopers.com/jobs/ext/2713654-iam-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IAM Engineer

- **Company:** Robert Half
- **Location:** Palo Alto, CA, United States
- **Experience:** Experienced
- **Salary:** $145,600.0 - $166,400.0
- **Contract:** Temporary contract
- **Skills:** Application Programming Interfaces (APIs), Identity and Access Management, Python (Programming Language), OAuth, OpenID, Azure Active Directory, Security Assertion Markup Language (SAML), Security Information and Event Management, SQL Databases, Tisax, Enterprise Software Applications, Cloud Platform System, Okta, Build Management
- **Published:** September 4, 2026
- **Apply:** https://www.disabledperson.com/jobs/74824696-iam-engineer

## About the Role

* Bachelor's degree or equivalent work experience
 * 7+ years of experience in identity and access management
 * 3+ years of hands-on Okta experience building, deploying, and maintaining Okta Workforce Identity Cloud environments
 * At least one completed enterprise migration from Entra ID / Azure AD to Okta as an architect or technical lead
 * Deep expertise in SAML, OIDC, OAuth 2.0, SCIM, and directory integration in hybrid AD / Entra ID environments
 * Experience administering Okta in production, including policy management, app integrations, lifecycle workflows, and troubleshooting
 * Experience designing MFA and adaptive access policies at enterprise scale
 * Strong documentation skills with the ability to produce audit-ready artifacts
 * Proven ability to work alongside system integrators while retaining architectural ownership

Preferred Skills

 * Okta Certified Consultant or Okta Certified Architect
 * Experience building custom identity automation or governance tooling using Python, SQL, APIs, and event-driven pipelines

## Description

* Lead the technical architecture for an Entra ID to Okta workforce identity migration, including federation design, app integration sequencing, cutover planning, rollback strategy, and hypercare
 * Design and build SSO/SAML/OIDC integrations across enterprise applications, including multi-tenant deployment for US/EU regional data requirements
 * Architect lifecycle management and provisioning workflows, including HR-driven joiner/mover/leaver processes and SCIM integrations
 * Define and implement MFA, adaptive authentication, and device assurance policies aligned to a zero-trust roadmap
 * Act as the technical counterpart to the implementation partner by reviewing designs, challenging assumptions, and ensuring delivery quality
 * Maintain and operate the Okta environment post-cutover, including policy tuning, integration onboarding, incident support, and operational runbooks
 * Produce audit-ready documentation aligned with ISO 27001 / TISAX control environments
 * Support identity orchestration and governance initiatives, including attribute-driven provisioning, ABAC policy models, JIT privileged access, anomaly detection, automated deprovisioning, and audit/recertification capabilities
 * Support integration of identity and authorization event logs into the cybersecurity SIEM


## Related Videos

- [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect)
- [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture)
- [Our GitOps approach for deploying an Identity Provider and an API Gateway in a SaaS company](https://www.wearedevelopers.com/videos/776-our-gitops-approach-for-deploying-an-identity-provider-and-an-api-gateway-in-a-saas-company)
- [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak)
- [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue)
- [Advanced Cypress: custom assertions and tasks](https://www.wearedevelopers.com/videos/790-advanced-cypress-custom-assertions-and-tasks)

## Related Articles

- [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers)
- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)
- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)