IAM Architect
charter globalMcLean (VA)
About the role
Title: IAM Architect (Okta)
Location: Herndon, VA (Hybrid - onsite Tuesday, Wednesday, Thursday)
Duration:
12 months+Citizenship Requirement: Must be a U.S. Citizen Employment Type: Contract (Potential Contract-to-Hire)
Position Overview:
We are seeking an experienced Okta SME / Architect to lead identity architecture and identity lifecycle management initiatives within a large enterprise software environment. This individual will serve as the subject matter expert for Okta, Microsoft Entra ID, and Active Directory, driving secure, scalable, and automated identity and access management (IAM) solutions aligned with Zero Trust and compliance requirements. The ideal candidate will possess deep expertise in Okta architecture, identity governance, federation technologies, automation, and IAM best practices.
Required Skills & Experience:
U.S. Citizenship required 7+ years of experience in System Administration or IAM Engineering roles 5+ years of focused Identity & Access Management experience
Deep expertise with:
- Okta (Universal Directory, Lifecycle Management, Workflows, MFA, Policies)SSO, SAML, OIDC, and federation technologies
- Microsoft Entra ID (Azure AD)
- Active Directory
- Advanced PowerShell scripting and automation experience
- Strong understanding of identity governance, access lifecycle management, and security best practices
- Ability to work onsite in Herndon, VA three days per week.
Key Responsibilities:
Serve as the SME and technical lead for Okta, Microsoft Entra ID, and Active Directory.
Design, implement, and maintain enterprise IAM architecture and integrations.
Lead application onboarding efforts, access governance initiatives, and lifecycle management processes.
Develop PowerShell automation for provisioning, deprovisioning, entitlement management, auditing, and compliance reporting.
Architect and manage Okta integrations, MFA policies, SCIM provisioning, and access request workflows.
Create and maintain IAM documentation, architecture diagrams, standards, and operating procedures.
Partner with Cybersecurity, Cloud Operations, and Infrastructure teams to ensure secure identity management practices.
Support incident response, troubleshooting, root-cause analysis, and service reliability initiatives.
Drive scalable IAM solutions that support regulatory and compliance requirements.
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.