Okta Identity & Provisioning Engineer

THE OPPORTUNITY

Our client is building a hands-on Okta identity and provisioning capability to support public-sector transitions that move user provisioning off legacy, flat-file identity feeds onto Okta as the enterprise standard for identity and access management. You will be the engineer who configures Okta, maps HR attributes sourced from SAP/HR systems into provisioning logic, and helps agency teams stand up secure, auditable user provisioning — working alongside client and SAP/identity technical leads. This role directly owns the Okta implementation workstream at the heart of Commonwealth modernization work.

WHAT YOU'LL DO

· Okta configuration — configure Okta for agency applications: attribute mappings, provisioning logic, and group/role rules; produce per-application Okta Configuration Worksheets.

· Provisioning & lifecycle (SCIM) — design, build, and validate SCIM-based provisioning/deprovisioning and lifecycle management, sourcing employee identity data from SAP HR / HCM and other authoritative sources.

· SSO & directory integration — implement SAML / OIDC / OAuth2 single sign-on and integrate Okta with agency applications and directories (Active Directory / LDAP / Entra ID) as needed.

· Hands-on testing & remediation — provide hands-on support for testing, troubleshooting, and remediation during provisioning transitions; produce test plans, test scripts, and remediation logs.

· Security & audit — enforce least-privilege access, audit logging, and compliance with client IAM governance and security policies.

· Cutover & hypercare — support cutover readiness and post-go-live stabilization for the provisioning use case, validating continuity and triaging issues.

Requirements

WHAT YOU BRING (REQUIRED)

· 4+ years of identity and access management (IAM) engineering, including demonstrable, project-based hands-on Okta (Workforce Identity) experience.

· Okta provisioning & lifecycle — hands-on Okta administration: SCIM provisioning, lifecycle management, attribute mapping, and group/role rules.

· SSO protocols — working fluency with SAML, OIDC, and OAuth2, and directory integration (Active Directory / LDAP / Entra ID).

· HR-sourced provisioning — experience provisioning identities from an authoritative HR/HCM source (e.g., SAP SuccessFactors, Workday, or equivalent).

· U.S.-based and able to attend onsite, in-person meetings in Harrisburg, PA when requested (all work performed within the United States).

STRONGLY PREFERRED / NICE TO HAVE

· SAP HR / SuccessFactors as identity source — experience mapping SAP employee-data attributes into Okta provisioning (the source data in these transitions is HR data from SAP).

· SAP S/4HANA / API integration — familiarity with S/4HANA data structures and OData/REST APIs. A candidate who covers BOTH Okta provisioning and SAP S/4HANA integration is ideal.

· Public-sector delivery — state or Commonwealth of Pennsylvania IT experience; multi-agency, governed, wave-based delivery environments.

· Clearance eligibility — able to obtain and hold a U.S. Public Trust.

RELEVANT CERTIFICATIONS (PREFERRED)

· Okta Certified Administrator

· Okta Certified Consultant

· Okta Certified Professional or Okta Certified Developer

· Adjacent IAM: Microsoft Identity & Access Administrator (SC-300), SailPoint, or CISSP

· SAP Certified Associate — SAP SuccessFactors Employee Central (HR data source, a plus)

Benefits

Experience a workplace where people are the X-Factor! At Info-Matrix, we believe our greatest strength is our team—a diverse group of passionate professionals united by a drive to solve real-world business challenges through innovative technology solutions. Our culture is built on integrity, teamwork, and a commitment to excellence, fostering an environment where every voice is valued and every contribution matters!

Comprehensive Benefits Offered by Info-Matrix

• Health & Wellness: Customized Medical, Dental, and Vision Plans
  
• Paid Time Off: Generous PTO & 11 paid holidays
  
• Info-Matrix Paid Coverage: Short-term and long-term disability, life insurance, and AD&D insurance.
  
• Retirement Savings Offering: 401(k) plan with company match