Staff Identity Governance and Access Engineer at Okta · LumiJobs

Responsibilities

OIG Architecture Ownership: Own OIG architecture end-to-end — design access request workflows, entitlement/Resource Collections structures, and certification campaigns that reduce reviewer fatigue and rubber-stamping.
Lifecycle, Birthright & RBAC Strategy: Lead lifecycle, birthright, and RBAC strategy — design and deploy automated birthright access rules, RBAC frameworks, and seamless joiner/mover/leaver (JML) processes across the enterprise.
Workday Integration Architecture: Drive Workday integration architecture — balance scheduled reconciliation (attribute accuracy) with Real-Time Sync (immediate termination), and define the attribute sets that access rules depend on.
Mover/Leaver Automation: Design and harden mover/leaver automation — implement attribute-driven group re-evaluation on role changes, safe decommissioning of stale access, and close gaps between automated joiner flows and historically manual processes.
OPA, ISPM & Zero Standing Privilege: Lead OPA, ISPM, and Zero Standing Privilege (ZSP) initiatives — design privileged session access, Just-In-Time (JIT) elevation, break-glass emergency access, identity security vulnerability detection, and tiering models for Tier 0/Tier 1 systems.
PAM & ISPM Metrics: Own PAM and ISPM telemetry and KPIs — establish and track metrics around standing-privilege reduction, JIT adoption, stale access cleanup, and break-glass test success as ongoing operational measures.
Okta Workflows Automation: Build and maintain Okta Workflows automation — streamline access requests, approvals, and remediation across IGA and PAM processes using the Okta Workflows engine.
Technical Leadership & Mentorship: Mentor engineers, review designs, and communicate with leadership — be the technical escalation point for the team's hardest problems, help junior engineers grow, and present clear updates, risk assessments, and roadmaps to executive stakeholders.
What you'll bring to the role
Domain Experience: Minimum 4+ years of direct, advanced experience managing and administering enterprise IGA, PAM/ISPM tools and platforms.
Birthright Provisioning & RBAC: Demonstrated hands-on experience designing and deploying Birthright Provisioning models and RBAC architectures in production environments.
PAM/OPA Tooling: Production experience with OPA or equivalent PAM tooling, including Zero Standing Privilege, Just-In-Time access models, break-glass design, and admin tiering.

Staff Identity Governance and Access Engineer

Responsibilities

Benefits

Company

Okta

More roles at Okta