Okta IAM / Identity Integration Engineer

Peraton is seeking a highly experienced Okta IAM/Identity Integration Engineer to support the Defense Manpower Data Center (DMDC) AMASS program. AMASS provides secure, scalable identity and access management services across the Department of Defense, enabling authentication, authorization, and digital identity interoperability for highvisibility DoD systems.

This position is 100% remote.

In this role, you will design, integrate, and sustain identity services using the Okta Identity Engine (OIE), implement secure authentication flows using the Okta Embedded SDK, and ensure compliance with DoD cybersecurity policies, including RMF, STIG, and NIST guidelines. This position requires extensive handson experience with modern identity protocols, mobile authentication, and enterprise IAM/ICAM solutions within Federal environments.

Responsibilities Configure, administer, and optimize Okta Identity Engine (OIE) to support DoD enterprise identity workflows.

• Implement and support the Okta Embedded SDK to deliver secure and standardized authentication for partner applications.
• Develop and enhance mobile identity integrations for native iOS and Android platforms supporting DoD mission applications.
• Implement modern identity standards including OAuth 2.0, OpenID Connect (OIDC), and PKCE.
• Configure phishingresistant authentication methods, including FIDO2/WebAuthn, in alignment with DoD Zero Trust objectives.
• Design and maintain adaptive and risk-based authentication policies.
• Integrate identity federation services (OIDC, SAML 2.0) including external Identity Provider (IdP) connections.
• Manage authentication token lifecycles (JWT, ID, Access, Refresh tokens) across DoD application ecosystems.
• Implement secure API authentication using OAuth scopes, claims, and structured authorization patterns.
• Build identity automation using Okta Workflows and nocode/lowcode orchestration tooling.
• Integrate Okta with DoD authoritative data sources and enterprise-level IAM services.
• Support identity lifecycle processes, including provisioning, deprovisioning, profile management, and attribute governance.
• Troubleshoot complex identity, federation, and mobile SDK integration issues across multiproduct DoD environments.
• Utilize REST APIs, Postman, and related tooling for API development, testing, and validation.
• Work with DevSecOps teams to integrate IAM capabilities into CI/CD pipelines supporting DoD modernization.
• Ensure identity implementations comply with DoD RMF, DISA STIGs, NIST SP 80063, and other Federal cybersecurity mandates.

• 5 years with BA/BS, 3 years with MS/MA, 0 years with PhD, 9 years with HS diploma
• Experience configuring and administering Okta Classic Engine or Okta Identity Engine (OIE).
• Must be able to obtain and maintain a Public Trust
• U.S. Citizenship required
• Experience implementing Okta Embedded SDK and designing secure custom authentication flows.
• Strong knowledge of OAuth 2.0, OIDC, PKCE, and related identity protocols.
• Experience implementing FIDO2/WebAuthn for phishingresistant authentication.
• Experience developing adaptive/risk-based authentication policies.
• Strong background in identity federation and IdP integrations (OIDC, SAML 2.0).
• Experience integrating secure mobile authentication for native iOS and Android.
• Understanding of authentication token lifecycle management.
• Experience designing structured API authorization models using OAuth scopes and claims.
• Experience with identity lifecycle processes, provisioning, and directory synchronization.
• Strong troubleshooting skills related to authentication, federation, and SDK integrations.
• Experience working with REST APIs and tools such as Postman.
• Understanding of NIST 800 SP68, * Okta Certified Administrator or Okta Certified Professional
• Security + Certification
• Hands-on experience with the Okta Identity Engine Embedded SDK for native app authentication.
• Experience supporting large-scale implementations.
• Knowledge of NIST SP 80063 Digital Identity Guidelines.
• Experience with CAC/PIV, derived credentials, or mobile credential solutions.
• Experience integrating identity proofing, identity verification, or credential issuance services.

$66,000 - $106,000 parental leave, paid time off, paid holidays, long term disability, 401(k), $66,000 - $106,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay. Benefits Statement

Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we’re keeping people around the world safe and secure.