Job Summary:
Volaris Group is seeking an Identity & Access Management (IAM) Specialist to join our Information Services team and support the administration, operation, and continuous improvement of our enterprise identity infrastructure.
This role will focus primarily on Okta Identity Engine, supporting day-to-day IAM operations, troubleshooting authentication and access issues, managing user identity lifecycles, and assisting with application integrations, automation, and ongoing Okta migrations.
Job Description:
We are looking for an Identity & Access Management (IAM) Specialist to join our team.
This role is ideal for someone early in their IAM or cybersecurity career who already has hands-on familiarity with Okta Identity Engine and wants to continue developing their technical skills across identity lifecycle management, authentication, application integrations, automation, and cloud identity.
The IAM Specialist will support the administration, operation, and continuous improvement of enterprise identity services, with a primary focus on Okta Identity Engine and related SaaS applications.
The successful candidate will report to the IAM Lead and work closely with application owners, infrastructure teams, security teams, and business stakeholders to support secure and reliable access across the organization.
Key Responsibilities
IAM Operations & Support
- Support the day-to-day administration and operation of Okta Identity Engine.
- Own the investigation and resolution of routine IAM support issues, escalating complex issues when necessary.
- Investigate and troubleshoot authentication, MFA, SSO, user provisioning, account lifecycle, and application access issues.
- Support user lifecycle processes including onboarding, transfers, leave of absence, offboarding, rehire, and account reactivation.
- Manage Okta users, groups, group rules, application assignments, user profiles, and directory integrations in accordance with established procedures.
- Review Okta System Log events and other platform logs to identify and troubleshoot authentication, provisioning, or access issues.
- Support approved authentication methods including Okta Verify, FastPass, FIDO2/WebAuthn security keys, and other MFA technologies.
- Assist with maintaining authentication policies, authenticator enrollment policies, application access policies, and group-based access controls.
- Perform standard Okta administrative changes in accordance with documented procedures and change-management requirements.
- Support both production and non-production IAM environments.
- Maintain operational documentation, troubleshooting guides, knowledge articles, and technical procedures.
Application Integration & Platform Engineering
- Assist with onboarding and integrating applications to Okta.
- Support the configuration and testing of Single Sign-On integrations using SAML 2.0 and OpenID Connect.
- Assist with application provisioning integrations using SCIM and other supported provisioning methods.
- Support integrations between Okta, Microsoft Entra ID, Active Directory, Microsoft 365, Workday, and SaaS applications.
- Participate in testing and validation of IAM configuration changes prior to production deployment.
- Assist with troubleshooting application integration issues involving authentication, provisioning, attributes, claims, or group assignments.
- Work with application owners and technical teams to gather requirements for new IAM integrations.
- Assist with IAM migrations, platform enhancements, tenant onboarding, and other identity-related projects.
Automation & Identity Lifecycle
- Support automated identity lifecycle processes and workflows.
- Assist with developing and maintaining automation using Okta Workflows, APIs, PowerShell, or other scripting technologies.
- Investigate failed automation or provisioning workflows and assist with remediation.
- Support HR-driven identity lifecycle integrations, including joiner, mover, and leaver processes.
- Help identify opportunities to automate repetitive IAM administrative tasks and improve operational efficiency.
Stakeholder Engagement
- Work with infrastructure, security, service desk, application, and business teams to resolve identity and access issues.
- Support application owners during application onboarding and IAM integration activities.
- Communicate clearly with technical teams and end users when troubleshooting authentication and access problems.
- Participate in IAM projects, technical discussions, and knowledge-sharing sessions.
- Escalate complex IAM issues while assisting with investigation and resolution.
- Contribute to team documentation and continuous improvement initiatives.
Must-Have Qualifications
- Hands-on familiarity with Okta Identity Engine (OIE) in an administrative or support capacity.
- Experience working with Okta users, groups, application assignments, authentication policies, and authenticator enrollment.
- Understanding of identity and access management concepts including authentication, authorization, Multi-Factor Authentication, Single Sign-On, provisioning, and identity lifecycle management.
- Experience troubleshooting Okta authentication or access issues using system logs, error messages, and configuration settings.
- Basic understanding of common identity federation and provisioning technologies such as SAML, OpenID Connect (OIDC), OAuth 2.0, and SCIM.
- Strong technical troubleshooting and analytical skills.
- Strong attention to detail, particularly when working with user access, permissions, and production systems.
- Good written and verbal communication skills.
- Ability to work collaboratively with technical and non-technical teams.
- Strong interest in continuing to develop a career in Identity and Access Management.
Preferred / Nice-to-Have Qualifications
- Experience with Okta Workflows.
- Familiarity with Okta Aerial.
- Experience integrating applications with Okta using SAML, OIDC, or SCIM.
- Experience with Microsoft Entra ID administration.
- Exposure to Active Directory and hybrid identity environments.
- Experience with Workday or another HR-driven identity source.
- Basic scripting experience using PowerShell, Python, or similar technologies.
- Experience working in a multi-tenant or hub-and-spoke Okta identity environment.
Education & Experience
- Diploma, degree, or equivalent practical experience in Computer Science, Information Technology, Cybersecurity, or a related technical discipline.
- 1–3 years of experience in Identity and Access Management, IT operations, systems administration, cybersecurity, cloud administration, or a related technical role, including hands-on experience with Okta Identity Engine.
- Direct Okta Identity Engine experience is required, although deep engineering or architecture experience in Okta is not expected.
Opportunities for Growth & Development
This position provides the opportunity to grow technical experience across:
- Okta Identity Engine administration and engineering.
- Contributing to the development and ongoing evolution of a global Okta Hub-and-Spoke identity architecture.
- Enterprise application SSO and provisioning.
- SAML, OAuth, OIDC, and SCIM.
- Automated joiner, mover, and leaver lifecycle processes.
- Workday-driven identity management.
- Okta Workflows and API-based automation.
- Passwordless and phishing-resistant authentication.
- FIDO2/WebAuthn and FastPass.
- Identity governance and access management.
- IAM monitoring and security.
- Enterprise SaaS integrations.
Ideal Candidate
The ideal candidate will have already had some exposure to Okta Identity Engine and understands the fundamentals of Identity and Access Management but is still developing deeper engineering skills.
We are looking for someone who is curious, technically motivated, detail-oriented, and comfortable troubleshooting complex issues. The successful candidate should enjoy learning new technologies, working with different technical teams, and gradually taking on greater responsibility as their IAM knowledge and experience grow.
This role is well suited for someone who wants to build a long-term career specializing in Identity and Access Management, identity security, automation, or cloud identity engineering.
Salary Range: $85,000 - $95,000
Worker Type:
Regular
Number of Openings Available:
1
