Job Description
THE OPPORTUNITY

Our client is building a hands-on Okta identity and provisioning capability to support public-sector transitions that move user provisioning off legacy, flat-file identity feeds onto Okta as the enterprise standard for identity and access management. You will be the engineer who configures Okta, maps HR attributes sourced from SAP/HR systems into provisioning logic, and helps agency teams stand up secure, auditable user provisioning - working alongside client and SAP/identity technical leads. This role directly owns the Okta implementation workstream at the heart of Commonwealth modernization work.

WHAT YOU'LL DO
• Okta configuration - configure Okta for agency applications: attribute mappings, provisioning logic, and group/role rules; produce per-application Okta Configuration Worksheets.
• Provisioning & lifecycle (SCIM) - design, build, and validate SCIM-based provisioning/deprovisioning and lifecycle management, sourcing employee identity data from SAP HR / HCM and other authoritative sources.
• SSO & directory integration - implement SAML / OIDC / OAuth2 single sign-on and integrate Okta with agency applications and directories (Active Directory / LDAP / Entra ID) as needed.
• Hands-on testing & remediation - provide hands-on support for testing, troubleshooting, and remediation during provisioning transitions; produce test plans, test scripts, and remediation logs.
• Security & audit - enforce least-privilege access, audit logging, and compliance with client IAM governance and security policies.
• Cutover & hypercare - support cutover readiness and post-go-live stabilization for the provisioning use case, validating continuity and triaging issues.

Requirements

WHAT YOU BRING (REQUIRED)
• 4+ years of identity and access management (IAM) engineering, including demonstrable, project-based hands-on Okta (Workforce Identity) experience.
• Okta provisioning & lifecycle - hands-on Okta administration: SCIM provisioning, lifecycle management, attribute mapping, and group/role rules.
• SSO protocols - working fluency with SAML, OIDC, and OAuth2, and directory integration (Active Directory / LDAP / Entra ID).
• HR-sourced provisioning - experience provisioning identities from an authoritative HR/HCM source (e.g., SAP SuccessFactors, Workday, or equivalent).
• U.S.-based and able to attend onsite, in-person meetings in Harrisburg, PA when requested (all work performed within the United States).

STRONGLY PREFERRED / NICE TO HAVE
• SAP HR / SuccessFactors as identity source - experience mapping SAP employee-data attributes into Okta provisioning (the source data in these transitions is HR data from SAP).
• SAP S/4HANA / API integration - familiarity with S/4HANA data structures and OData/REST APIs. A candidate who covers BOTH Okta provisioning and SAP S/4HANA integration is ideal.
• Public-sector delivery - state or Commonwealth of Pennsylvania IT experience; multi-agency, governed, wave-based delivery environments.
• Clearance eligibility - able to obtain and hold a U.S. Public Trust.

RELEVANT CERTIFICATIONS (PREFERRED)
• Okta Certified Administrator
• Okta Certified Consultant
• Okta Certified Professional or Okta Certified Developer
• Adjacent IAM: Microsoft Identity & Access Administrator (SC-300), SailPoint, or CISSP
• SAP Certified Associate - SAP SuccessFactors Employee Central (HR data source, a plus)

Benefits

Comprehensive Benefits Offered by Info-Matrix

• Health & Wellness: Customized Medical,Dental, and Vision Plans
• Paid Time Off: Generous PTO &11 paid holidays
• Info-Matrix Paid Coverage: Short-term andlong-term disability, life insurance, and AD&D insurance.
• Retirement Savings Offering: 401(k) plan withcompany match