Senior Okta Engineer (IAM)
- Brampton, ON, Canada
Full-time
Applications open in a new tab.
Job details
- Job type
- Full-time
- Apply by
- Experience
- With over 20 years of experience providing the best logistics solutions, Charger logistics has transformed into a world-class transport provider and continue to grow.
- Posting language
- English
- Posted
Original job description
Charger logistics Inc. is a world- class asset-based carrier with locations across North America. With over 20 years of experience providing the best logistics solutions, Charger logistics has transformed into a world-class transport provider and continue to grow.
Senior Okta Engineer (IAM) - Non-Human & AI Agent Identity
We're looking for a Senior Okta Engineer to own our Okta environment hands-on. You'll be our go-to Okta expert, running SSO, provisioning, governance and privileged access for our workforce. We run Okta alongside Microsoft Entra ID, and you'll also lead how we bring AI agents, bots and service accounts under the same identity platform. This is a hands-on engineering role. You'll build and run the platform yourself.
Responsibilities:
- Own and administer Okta end to end: SSO, MFA, sign-on policies, Universal Directory, SCIM provisioning, Okta Identity Governance (OIG) and Okta Privileged Access.
- Build and maintain app integrations using SAML, OIDC and OAuth 2.0, and troubleshoot them when they break.
- Automate identity lifecycle with Okta Workflows, Okta APIs, and Python or PowerShell.
- Keep Okta and Entra ID working together in our hybrid setup, and connect identity to Google Cloud IAM with our platform team.
- Roll out Okta's AI agent capabilities, including Agent SSO, Cross App Access and agent lifecycle governance.
- Set the standards for service accounts and AI agents: one identity per workload, a named owner, least-privilege access and short-lived credentials. Build vaulting and rotation for machine credentials.
- Write clear, developer-facing guides for how teams request and use identities.
- 5+ years in IAM, with at least 3 years of deep, hands-on Okta administration.
- Strong working knowledge of Entra ID (Azure AD) in a hybrid environment.
- A real understanding of how SAML, OIDC and OAuth 2.0 work, not just how to configure them.
- Hands-on experience with SCIM provisioning, identity governance and privileged access, on Okta or comparable platforms (SailPoint, CyberArk, BeyondTrust, HashiCorp Vault).
- Python or PowerShell scripting against identity APIs.
Nice to Have
- Exposure to AI agent identity: Okta for AI Agents, Microsoft Entra Agent ID, SPIFFE/SPIRE, or MCP/agent authorization patterns.
- Okta Certified Professional, Administrator or Consultant
- Okta Workflows or Terraform for Okta
- Experience managing service accounts, API keys, secrets or workload identity
- Exposure to AI agent identity: Okta for AI Agents, Microsoft Entra Agent ID, or MCP/agent authorization patterns
- Google Cloud IAM or workload identity federation
- Zero-trust access tools such as Zscaler, Cloudflare or Tailscale
- Experience in transportation, logistics or another 24/7 operations environment
- Competitive Salary
- Healthcare Benefit Package
- Career Growth
More about this job
Responsibilities
Own and operate the Okta identity platform, including SSO, provisioning, governance, privileged access, application integrations, and automation. Coordinate identity across Okta, Microsoft Entra ID, and Google Cloud, while establishing lifecycle, access, credential, and governance standards for service accounts and AI agents.
Requirements
Requires at least five years of IAM experience, including three or more years of hands-on Okta administration, plus strong knowledge of Microsoft Entra ID and SAML, OIDC, and OAuth 2.0. Candidates should have experience with SCIM, identity governance, privileged access, and Python or PowerShell scripting; Okta certifications, Terraform, workload identity, and AI agent identity are advantageous.
Skills
- Okta Administration
- Identity and Access Management
- Microsoft Entra ID
- Single Sign-On
- Multi-Factor Authentication
- SAML
- OIDC
- OAuth 2.0
- SCIM Provisioning
- Identity Governance
- Privileged Access Management
- Okta Workflows
- Python
- PowerShell
- Service Account Management
- AI Agent Identity
Benefits
- Competitive Salary
- Healthcare Benefit Package
- Career Growth
Visa sponsorship
Not detected in the job text
Categories
- Technology
- Security & Safety
- Transportation
- Logistics
Keywords
- Okta
- Identity and Access Management
- Microsoft Entra ID
- Azure AD
- Google Cloud IAM
- Single Sign-On
- Multi-Factor Authentication
- Universal Directory
- SAML
- OIDC
- OAuth 2.0
- SCIM
- Okta Identity Governance
- Okta Privileged Access
- Okta Workflows
- Okta APIs
- Python
- PowerShell
- Terraform
- AI Agent Identity
- Agent SSO
- Cross App Access
- Service Accounts
- Workload Identity
- Credential Vaulting
- Credential Rotation
- SPIFFE/SPIRE
- MCP Authorization
- Zero-Trust Access
- Transportation and Logistics