StraitSys Inc
Regular
Okta SME
Clearance Level:
Location: EOUSA Headquarters, 175 N Street NE, Washington, DC. Remote work permitted if authorized by COR.
PRIMARY FUNCTION
StraitSys is seeking an experienced Okta Subject Matter Expert (SME) to support the Department of Justice (DOJ), Executive Office for United States Attorneys (EOUSA), Office of the Chief Information Officer (OCIO), Cybersecurity Services (CSS) Identity and Access Management (USAidam) Program in Washington, DC.
The Okta SME will provide technical expertise in the design, configuration, integration, administration, maintenance, and enhancement of enterprise Identity and Access Management (IAM) solutions, with a primary focus on Okta Identity Engine (OIE), Okta Advanced Server Access (ASA), and Okta Privileged Access (OPA).
This individual will support secure authentication, Single Sign-On (SSO), Multi-Factor Authentication (MFA), application federation, privileged access management, and identity lifecycle integration across the USAidam environment. The Okta SME will collaborate with Government stakeholders, SailPoint engineers, cybersecurity personnel, and DevSecOps teams to maintain reliable identity services, automate access-management processes, troubleshoot complex technical issues, and advance Federal Zero Trust Architecture objectives.
The position will support ongoing Operations and Maintenance (O&M), application onboarding, system enhancements, security compliance, and continuous improvement of USAidam identity and authentication capabilities.
ESSENTIAL FUNCTIONS
Serve as a technical SME for Okta Identity Engine, Okta Identity-as-a-Service (IDaaS), Okta Advanced Server Access, and Okta Privileged Access within the USAidam environment.
Design, configure, administer, maintain, and enhance Okta-based authentication and identity services supporting USAlogin and USApriv.
Implement and maintain SSO and MFA capabilities using SAML 2.0, OIDC, Okta Verify, PIV credentials, and other approved authentication technologies.
Configure and maintain Okta integrations with enterprise applications, Active Directory, SailPoint IdentityIQ, DOJ Login, and external identity providers.
Support application onboarding and federation, including Okta Org2Org connections, authentication policies, user provisioning, role assignments, and access management.
Deploy, configure, troubleshoot, and maintain Okta AD agents, Okta Verify for Desktop, and Okta ASA/OPA clients and agents.
Configure and maintain privileged access controls for Windows, Linux, and AWS environments, enforcing least privilege and strong authentication requirements.
Support onboarding of Windows and Linux servers into the USApriv privileged access management environment, including agent deployment, configuration, and role management.
Develop and maintain automated processes for privileged account discovery, provisioning, entitlement updates, deprovisioning, and lifecycle management.
Integrate privileged account management processes with SailPoint IdentityIQ governance workflows and access certification requirements.
Configure and support privileged session recording, audit logging, and forwarding of security events to Government-designated monitoring systems.
Troubleshoot complex authentication, federation, provisioning, integration, and privileged-access issues escalated by the USAidam Helpdesk or Government stakeholders.
Develop and maintain automation scripts and API integrations using technologies such as PowerShell, JSON, REST APIs, and AWS Lambda.
Support application and system patching, security updates, vulnerability remediation, and routine O&M activities.
Participate in Agile/DevSecOps development activities, including configuration management, testing, regression testing, User Acceptance Testing (UAT), and production deployments.
Support security and compliance activities, including access reviews, audit reporting, Security and Privacy Assessment & Authorization (SPA&A), and Federal Zero Trust…