Staff Identity Governance and Access Engineer

Okta
Bellevue, Chicago, Washington
Workplace: OnsiteFull timeUSD 161,000 - 221,000 annuallyFunction: Healthcare (Clinical, Medical, Wellness)Experience: 4+ yearsSkills: ["Self-starter","Mentorship","Technical escalation","Executive communication","Documentation"]

Own the architecture and technical execution of identity governance and access security programs, including Okta Identity Governance (OIG), Privileged Access (OPA), and Identity Security Posture Management (ISPM). Lead end-to-end design for access requests, entitlement and certification workflows, joiner/mover/leaver lifecycle automation, and Workday integrations. Drive Zero Standing Privilege, Just-In-Time elevation, break-glass access, and operational telemetry, while mentoring engineers and raising the bar through reviews and documentation.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Okta
Okta
3 days ago

Staff Identity Governance and Access Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 9 hours agoStatus: Live

Job Summary

Own the architecture and technical execution of identity governance and access security programs, including Okta Identity Governance (OIG), Privileged Access (OPA), and Identity Security Posture Management (ISPM). Lead end-to-end design for access requests, entitlement and certification workflows, joiner/mover/leaver lifecycle automation, and Workday integrations. Drive Zero Standing Privilege, Just-In-Time elevation, break-glass access, and operational telemetry, while mentoring engineers and raising the bar through reviews and documentation.
Location: Bellevue, Chicago, Washington
Workplace: Onsite
Employment Type: Full time
Job Function: Healthcare (Clinical, Medical, Wellness)
Seniority: Mid level

Key Responsibilities

  • •Own OIG architecture end-to-end, including access request workflows, entitlement/resource collection structures, and certification campaign design.
  • •Lead lifecycle, birthright, and RBAC strategy, including automated birthright access rules and joiner/mover/leaver processes.
  • •Drive Workday integration architecture, balancing scheduled reconciliation with Real-Time Sync and defining dependent attribute sets.
  • •Design and harden mover/leaver automation, including group re-evaluation on role changes and safe decommissioning of stale access.
  • •Own PAM/ISPM telemetry and KPIs and lead OPA/ISPM/Zero Standing Privilege initiatives, including privileged session access, JIT elevation, break-glass access, vulnerability detection, and tiering models.

Pay and Benefits

Salary: USD 161,000 - 221,000 annually
Equity and Bonus:Equity
Perks:Health InsuranceDentalVision401kPaid Leave

Key Requirements

  • •Minimum 4+ years of direct, advanced experience administering enterprise IGA and PAM/ISPM tools and platforms.
  • •Hands-on experience designing and deploying Birthright Provisioning models and RBAC architectures in production.
  • •Production experience with OPA (or equivalent PAM tooling), including Zero Standing Privilege, Just-In-Time access models, break-glass design, and admin tiering.
  • •Production experience with ISPM tools (such as Okta ISPM) that integrate with EDR solutions like Crowdstrike Falcon.
  • •Ability to independently drive initiatives and communicate executive-ready updates, risks, and roadmaps; must be a U.S. person and on U.S. soil.
Experience:4+ yearsIdentity governancePrivileged access managementIdentity security posture managementEDRCompliance (SOX)
Skills:Self-starterMentorshipTechnical escalationExecutive communicationDocumentation
Certifications:Okta Certified AdministratorOkta Certified ConsultantOkta Workflows Specialist
Languages:English
Tech Stack:Okta Identity Governance (OIG)Okta Privileged Access (OPA)Identity Security Posture Management (ISPM)Okta WorkflowsWorkdayWorkday-to-IdP patternsJiraServiceNowREST APIsJSON parsingWebhooksSAMLOIDCOAuth 2.0SCIMRBACZero Standing Privilege (ZSP)Just-In-Time (JIT)Break-glass

Eligibility

Nationality:US National

Company Brief

Okta
Provides identity and access management cloud solutions that help organizations secure and manage user authentication, single sign-on, multi-factor authentication, and lifecycle management across applications and devices.
Industry: Cybersecurity
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: San Francisco, United States
Founded: 2009
WebsiteLinkedIn