Sen Teacher

MBI Staffing is seeking an IAM Senior Admin and Solutions Architect. This person will act as a senior engineer and solutions architect for the Global Identity & Access Management platform. Must have experience with Okta Identity Management and be comfortable designing solution patterns for typical and custom Identity frameworks across both infrastructure and development life cycles. The ideal candidate should have 3-4 years of experience in administering and engineering an Identity Provider, including base SSO setup via SAML/OpenID Connect, B2B Federation Connection setup, and with standard expression logic and PowerShell scripts used in analytical reporting and custom attribute patterns.

What this job involves:

This person will be working closely with internal customers and external clients as a fellow member of a Global IAM team as well as cross-functional global developers seeking to instrument applications for single sign-on. This person will serve as the department expert for architectural solution design and documentation (Product Roadmaps), including PowerShell scripting to maintain and design analytics reports in Okta as well as design and implement custom application-level expression language regarding attribute manipulation.

Requirements

Sound like you? Before you apply, this is what we are looking for:

Required Skills:

Identity Provider Engineering Skills:

• PowerShell Scripting & Okta Expression languages for attribute manipulation and reporting within Okta IdP
  
• Create or modify SSO connections to SaaS Providers using Okta
  
• Create or modify B2B SSO connections from external clients to internal JLL service offerings using Okta
  
• Social Authentication through Google, Self-registration, etc., within Okta
  
• Troubleshoot any faulty IdP or SP SSO connections at the application, user, or client level
  
• Security Assertion Markup Language (SAML 2.0), WSFED, OpenID Connect/OAuth as it relates to enabling applications for authentication services and SSO
  
• Support End Users with authentication or SSO issues through ticket queue management as a Level 3 engineer
  
• Support developers attempting to instrument their applications with authentication services and SSO through Okta
  

Architecture Skills:

• Interest in staying current with Okta product features and enhancements and turning those into deliverable solutions and roadmap items
  
• Ability to maintain and develop Identity product roadmaps by gathering requirements and maintaining close relationships with consumers and Global Enterprise Architecture divisions
  

Product Experience & Technical Skills:

• Okta Identity Management - Life-Cycle Management, Adaptive MFA, API Access Management, etc.
  
• PowerShell scripting - Custom application expression statements for attribute or account-level manipulation
  
• Active Directory (Azure) & LDAP
  
• Active Directory Federation Services (ADFS)
  
• Experience with Ping Federate is welcome but not required
  
• Experience with development, specifically object-oriented languages, is desirable
  

HARD SKILLS:

• Significant exposure to Okta IdP tool across the following patterns: SAML, OpenID Connect, WSFED, Delegated Authentication via Active Directory, Multi-Factor Authentication, Consumer-Oriented Authentication (Social Auth), Radius (Citrix)
  
• Comfortable constructing & documenting a product roadmap within Identity & Access Management
  
• Comfortable documenting solution alternative patterns and offering recommendations both within and outside of the global identity team
  
• Exposure to Windows Azure and Office 365, specifically Azure Active Directory
  
• Excellent knowledge of B2B Identity Federation setup/enhancements, outbound SSO, and B2B connections through IdPs
  
• Interface with client-side IdP Architects, Administrators, Developers, and Engineers
  
• Recognize the technical dependencies and impacts across the Program/projects that involve and require identity and access solutions
  
• Experience managing level 2+3 tickets and dealing with user-level support issues for a Global company that operates 24x7. Individual must be willing to work within a monthly on-call rotation schedule
  
• Excellent written and oral communication skills
  

Location:

• Remote in the U.S. - CST or EST zones
  

This is a long-term position

MBIs COMMITMENT TO YOU:

Our job is to showcase our talented, professional candidates to globally recognized organizations where work/life balance is second to none! Our expert candidates solve the worlds problems--from every day to the epic, from the mundane to the monumental.

MBIs CORE:

MBIs foundation is built upon our commitment and passion for finding the best IT talent in the world and for matching that talent to our customers needs. MBI attracts highly skilled, quality people, and we expect a high level of commitment from all our team members to deliver quality work.

Sound like you? Before you apply, this is what we are looking for: Required Skills: Identity Provider Engineering Skills: PowerShell Scripting & Okta Expression languages for attribute manipulation and reporting within Okta IdP Create or modify SSO connections to SaaS Providers using Okta Create or modify B2B SSO connections from external clients to internal JLL service offerings using Okta Social Authentication through Google, Self-registration, etc., within Okta Troubleshoot any faulty IdP or SP SSO connections at the application, user, or client level Security Assertion Markup Language (SAML 2.0), WSFED, OpenID Connect/OAuth as it relates to enabling applications for authentication services and SSO Support End Users with authentication or SSO issues through ticket queue management as a Level 3 engineer Support developers attempting to instrument their applications with authentication services and SSO through Okta Architecture Skills: Interest in staying current with Okta product features and enhancements and turning those into deliverable solutions and roadmap items Ability to maintain and develop Identity product roadmaps by gathering requirements and maintaining close relationships with consumers and Global Enterprise Architecture divisions Product Experience & Technical Skills: Okta Identity Management - Life-Cycle Management, Adaptive MFA, API Access Management, etc. PowerShell scripting - Custom application expression statements for attribute or account-level manipulation Active Directory (Azure) & LDAP Active Directory Federation Services (ADFS) Experience with Ping Federate is welcome but not required Experience with development, specifically object-oriented languages, is desirable HARD SKILLS: Significant exposure to Okta IdP tool across the following patterns: SAML, OpenID Connect, WSFED, Delegated Authentication via Active Directory, Multi-Factor Authentication, Consumer-Oriented Authentication (Social Auth), Radius (Citrix) Comfortable constructing & documenting a product roadmap within Identity & Access Management Comfortable documenting solution alternative patterns and offering recommendations both within and outside of the global identity team Exposure to Windows Azure and Office 365, specifically Azure Active Directory Excellent knowledge of B2B Identity Federation setup/enhancements, outbound SSO, and B2B connections through IdPs Interface with client-side IdP Architects, Administrators, Developers, and Engineers Recognize the technical dependencies and impacts across the Program/projects that involve and require identity and access solutions Experience managing level 2+3 tickets and dealing with user-level support issues for a Global company that operates 24x7. Individual must be willing to work within a monthly on-call rotation schedule Excellent written and oral communication skills Location: Remote in the U.S. - CST or EST zones This is a long-term position MBI's COMMITMENT TO YOU: Our job is to showcase our talented, professional candidates to globally recognized organizations where work/life balance is second to none! Our expert candidates solve the world's problems--from every day to the epic, from the mundane to the monumental. MBI's CORE: MBI's foundation is built upon our commitment and passion for finding the best IT talent in the world and for matching that talent to our customer's needs. MBI attracts highly skilled, quality people, and we expect a high level of commitment from all our team members to deliver quality work.