Maintain, configure, and optimize the Okta platform, including SSO integrations, MFA policies, group assignments, and identity governance capabilities.
Monitor platform performance, availability, and security posture, taking corrective action as needed.
Manage Okta Workflows for automation of provisioning, deprovisioning, approvals, and other lifecycle events.
Account Lifecycle Management
Oversee end‑to‑end account provisioning and deprovisioning for faculty, staff, students, affiliates, and contractors.
Partner with HR, IT, and departmental stakeholders to ensure identity data is accurate, timely, and consistent.
Maintain lifecycle rules, group membership automations, and role‑based access controls to ensure least‑privileged access.
Support onboarding and offboarding processes, resolving identity or access-related escalations.
Access Governance & Security
Ensure identity and access processes align with security policies, compliance requirements, and audit expectations.
Conduct regular access reviews, system entitlement audits, and cleanup of stale or inconsistent identity data.
Participate in incident response activities when identity-related issues or security events arise.
Assist in maturing IAM governance, including documentation, standards, and process improvements.
Systems Integration & Automation
Support integration of new applications into Okta using SAML, OIDC, SCIM, API-based provisioning, and other standards.
Build and troubleshoot automated workflows for identity-related business processes.
Collaborate with system owners to map entitlements, roles, and provisioning logic across enterprise systems.
Collaboration & Operational Support
Partner with the Information Security Services and Enterprise Systems teams to support ongoing IAM initiatives and projects.
Serve as a subject matter expert for campus stakeholders needing identity or access guidance.
Maintain documentation, knowledge base articles, technical diagrams, and process documentation.
Provide high-quality customer service to resolve identity and access support tickets.
Required Qualifications
Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field; or an equivalent combination of education and experience.
Experience administering an enterprise IAM platform (Okta strongly preferred).
Understanding of identity protocols such as SAML, OAuth2, OIDC, SCIM, LDAP, and MFA technologies.
Experience with account provisioning/deprovisioning, role-based access control, and identity lifecycle systems.
Ability to troubleshoot identity flows and integrations across multiple platforms.
Strong analytical and problem‑solving abilities with exceptional attention to detail.
Excellent written and verbal communication skills and demonstrated ability to work collaboratively in a dynamic environment.
Requirements
Experience with Okta Workflows or similar identity automation technologies.
Familiarity with higher education environments, HR systems, and student information systems.
Knowledge of compliance frameworks such as NIST, GLBA, or other regulatory standards relevant to identity governance.
Experience with scripting languages (e.g., Python, PowerShell) for automation.
About the Division of Information Technology
Department
Cybersecurity Operations and Compliance
Compensation Range
Benefits
Vision insurance
Additional Information
Job Description
Position Summary
The Identity and Access Management (IAM) Administrator plays a critical role in securing the university's digital ecosystem by managing user identities, enforcing access governance, and ensuring that account lifecycle processes operate reliably and efficiently. This position is responsible for administering the Okta Identity platform and supporting identity workflows, automation, and provisioning processes across enterprise systems. The IAM Administrator collaborates closely with Security Services, Enterprise Information Systems, HRIS, and other campus stakeholders to maintain a secure, efficient, and user‑friendly access environment.
This individual will help operationalize modern IAM capabilities, enhance workflow automation, and ensure compliance with institutional security policies, regulatory requirements, and industry best practices.
Stevens · Hoboken, NJ