IAM Federation Services (Okta) Engineer

Description

Join the Information Security and Risk Management (ISRM) team as an IAM Federation Services Engineer. The team equips internal partners to work with data and technology securely.

You will design, build and run directory and authentication services for a global base of 80,000 users and customer identities, working mainly with Microsoft Entra ID (formerly Azure AD), Okta and Ping Federate.

The company develops medicines in immunology, oncology and neuroscience and also has an aesthetics portfolio.

You have experience as a federation engineer or in a similar role, with a solid grasp of identity and access management and hands-on work with Okta, Entra ID and PingFederate.

You have hands-on experience with Okta Identity Engine (OIE) for customer identity flows, including registration, self-service, B2C and B2B patterns and the Sign-in Widget.

You understand federation platform features such as user lifecycle management, SSO and MFA.

You can troubleshoot complex federation problems and resolve them.

You communicate clearly and work well with cross-functional teams.

You pay close attention to detail and can set priorities in a environment that moves quickly.

Responsibilities

• Design and build federation identity and access management solutions that fit business requirements.
• Connect federation platforms to enterprise and cloud systems, such as Active Directory, HR systems and cloud applications, using SAML 2.0, OIDC and OAuth 2.0.
• Build and maintain custom sign-in experiences using Okta APIs, SDKs and widget-based login flows.
• Configure and support MFA methods, including PingID, Okta Verify, MS Authenticator, FIDO2, biometrics and OTP/push.
• Diagnose federation authentication, authorization and user provisioning issues by analyzing logs.
• Monitor and tune federation infrastructure so it scales and performs well.
• Advise administrators and end users on federation topics.
• Work with internal teams, vendors and external partners to find integration opportunities and strengthen federation capabilities.
• Document federation configurations, processes and procedures, and recommend improvements based on industry trends.

Requirements

• A bachelor's degree with 5 years of experience, or a master's degree with 4 years of experience.
• At least 4 years of experience with Okta and Ping Federate.
• Advanced PowerShell scripting skills to automate and manage identity systems.
• Strong problem-solving skills and the ability to work in a fast-moving, global environment.
• Preferred: certifications in relevant federation technologies, such as Okta Certified Administrator, Ping Federate / PingOne Certified or Microsoft Entra ID.
• Preferred: experience supporting large-scale environments of 10,000+ users, ideally 80,000+ users.
• Preferred: knowledge of security best practices and compliance frameworks such as NIST and ISO 27001.

Conditions

The base pay range shown is what the company expects to pay for this role at posting, based on job grade, and is provided where pay disclosure laws apply. Actual pay depends on factors such as location and may fall above or below the range, which may change.

The role is eligible for short-term incentive programs. Pay, bonuses and other compensation are not earned until paid and remain at the company's sole discretion, subject to change consistent with law.

Open to applicants in the US and Puerto Rico only.

The company is an equal opportunity employer that welcomes veterans and people with disabilities.

Benefits

• Eligible employees receive a comprehensive package including paid time off for vacation, holidays and sick leave, medical, dental and vision insurance, and a 401(k) plan.