Lead IAM Engineer (Okta)

Location: New York City, hybrid

Salary: $101,000–$158,000 per year for candidates based in the United States; expected OTE is $112,000–$176,000 per year, plus equity.

Company

hirify.global is a customer engagement platform that helps brands deliver personalized experiences through cross-channel messaging, journey orchestration, AI-powered decisioning, and optimization.

What you will do

• Own the technical roadmap and architecture for enterprise identity and access management, with Okta as the core platform.
• Architect and improve SSO, authentication, lifecycle automation, Workflows, identity governance, and access requests.
• Design reliable onboarding, role-change, and offboarding processes for employees, contractors, partners, and other user populations.
• Build integrations between Okta and Workday, Google Workspace, Slack, GitHub, Atlassian, MDM, and other enterprise systems.
• Drive automation through Okta Workflows, APIs, scripting, Terraform, infrastructure as code, validation, peer review, and controlled deployment.
• Lead access governance, audit controls, complex incident resolution, engineering standards, mentoring, and identity architecture improvements.

Requirements

• Deep hands-on experience with Okta in complex enterprise environments, including SSO, Lifecycle Management, Authentication, MFA, Workflows, and Identity Governance.
• Advanced knowledge of SAML, OIDC, OAuth 2.0, SCIM, federation, provisioning, authentication, and authorization.
• Experience automating onboarding, role changes, and offboarding using an HRIS such as Workday as the authoritative employee data source.
• Strong identity governance, API integration, scripting, and automation skills using Python, PowerShell, or similar languages.
• Experience with Terraform or another infrastructure-as-code framework and with SOX-regulated or similarly controlled IAM environments.
• Ability to lead cross-functional IAM initiatives, explain architecture and risk to technical and non-technical audiences, and mentor engineers.

Nice to have

• Okta certifications, including Administrator, Consultant, Developer, or Identity Governance credentials.
• Experience managing identity configuration through Terraform, Git-based workflows, or CI/CD.
• Experience with partner, reseller, B2B, service-account, machine-identity, or workload-identity architectures.
• Familiarity with Google Workspace, Slack, GitHub, Atlassian, Kandji, Jamf, Zscaler, or 1Password.

Culture & Benefits

• Hybrid ways of working with a curated in-office experience focused on community, connection, and innovation.
• Comprehensive medical, dental, vision, life, and disability benefits.
• Flexible paid time off, retirement plans, employee stock purchase plans, and potential equity grants.
• Family services, fertility benefits, and equal paid parental leave.
• Professional development through career pathing, learning platforms, and a yearly learning stipend.
• Employee Resource Groups, volunteer opportunities, donation matching, and a collaborative culture.

Hiring process

• AI-assisted tools may be used to review application materials, schedule and record interviews, and summarize interview notes.
• Applicants can request an alternative selection process or reasonable accommodation for AI-assisted review where applicable, including under New York City Local Law 144.