Asks for

The ad says“Experience with scripting and automation using Python, Bash, or PowerShell, and interacting directly with Okta REST APIs.”
The ad says“Deep understanding of identity protocols including SAML 2.0, OAuth 2.0, OIDC, SCIM, and LDAP.”
The ad says“Deep understanding of identity protocols including SAML 2.0, OAuth 2.0, OIDC, SCIM, and LDAP.”
The ad says“Deep understanding of identity protocols including SAML 2.0, OAuth 2.0, OIDC, SCIM, and LDAP.”
The ad says“As a Senior IAM Engineer within our IAM and Corporate Applications team, you will lead the design, automated deployment, and administration of our Okta enterprise identity platform. Your core responsibilities include architecting, writing, and maintaining scalable Terraform modules to provision and manage Okta applications, groups, authentication policies, authorization rules, and admin role assignments. You will manage Okta Workforce Identity Cloud configurations such as SSO, MFA, Adaptive Authentication, Universal Directory, and Workflows. Additionally, you will automate user onboarding, offboarding, and role-based provisioning (SCIM, SAML, OIDC) across cloud infrastructure and enterprise software. You will enforce Least Privilege Access and Zero Trust policies, assist with compliance reporting (SOX, SOC2, ISO 27001), integrate Okta Terraform workflows into continuous deployment pipelines (GitHub/Jenkins CI/CD), and serve as a subject matter expert for complex identity integrations and incident escalations.”
The ad says“Experience with scripting and automation using Python, Bash, or PowerShell, and interacting directly with Okta REST APIs.”
The ad says“Experience with scripting and automation using Python, Bash, or PowerShell, and interacting directly with Okta REST APIs.”
The ad says“Experience with scripting and automation using Python, Bash, or PowerShell, and interacting directly with Okta REST APIs.”
The ad says“Deep understanding of identity protocols including SAML 2.0, OAuth 2.0, OIDC, SCIM, and LDAP.”
The ad says“Deep understanding of identity protocols including SAML 2.0, OAuth 2.0, OIDC, SCIM, and LDAP.”
The ad says“As a Senior IAM Engineer within our IAM and Corporate Applications team, you will lead the design, automated deployment, and administration of our Okta enterprise identity platform. Your core responsibilities include architecting, writing, and maintaining scalable Terraform modules to provision and manage Okta applications, groups, authentication policies, authorization rules, and admin role assignments. You will manage Okta Workforce Identity Cloud configurations such as SSO, MFA, Adaptive Authentication, Universal Directory, and Workflows. Additionally, you will automate user onboarding, offboarding, and role-based provisioning (SCIM, SAML, OIDC) across cloud infrastructure and enterprise software. You will enforce Least Privilege Access and Zero Trust policies, assist with compliance reporting (SOX, SOC2, ISO 27001), integrate Okta Terraform workflows into continuous deployment pipelines (GitHub/Jenkins CI/CD), and serve as a subject matter expert for complex identity integrations and incident escalations.”

Who is Tenable?

Tenable® is the Exposure Management company. Over 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. Our global employees support 65 percent of the Fortune 500, 50 percent of the Global 2000, and large government agencies. Come be part of our journey!

What makes Tenable such a great place to work?

Ask a member of our team and they’ll answer, “Our people!” We work together to build and innovate best-in-class cybersecurity solutions for our customers; all while creating a culture of belonging, respect, and excellence where we can be our best selves. When you’re part of our #OneTenable team, you can expect to partner with some of the most talented and passionate people in the industry, and have the support and resources you need to do work that truly matters. We deliver results that exceed expectations and we win together!

Applicants must be authorized to work for any employer in the U.S. without sponsorship. We are unable to provide sponsorship for work visas of any kind at the time of hire, or at any point during employment. This includes, but is not limited to: F1-OPT, F1-CPT, H-1B, TN, J-1, etc

Your Role:

As a Senior IAM Engineer within our IAM and Corporate Applications team, you will lead the design, automated deployment, and administration of our Okta enterprise identity platform. Your core responsibilities include architecting, writing, and maintaining scalable Terraform modules to provision and manage Okta applications, groups, authentication policies, authorization rules, and admin role assignments. You will manage Okta Workforce Identity Cloud configurations such as SSO, MFA, Adaptive Authentication, Universal Directory, and Workflows. Additionally, you will automate user onboarding, offboarding, and role-based provisioning (SCIM, SAML, OIDC) across cloud infrastructure and enterprise software. You will enforce Least Privilege Access and Zero Trust policies, assist with compliance reporting (SOX, SOC2, ISO 27001), integrate Okta Terraform workflows into continuous deployment pipelines (GitHub/Jenkins CI/CD), and serve as a subject matter expert for complex identity integrations and incident escalations.

Your Opportunity:

Step in as the primary subject matter expert for all Okta-related initiatives across our enterprise environment.
Leverage Terraform to manage Okta resources and configurations, driving scalable lifecycle management processes and seamless user access control across a secure environment.
Assist with managing a broader suite of corporate applications, including Google Workspace, Slack, GitHub, and Atlassian Jira & Confluence.
Play a key role in supporting the adoption and integration of emerging AI platforms related to corporate application infrastructure.

What You'll Need:

8+ years of hands-on experience designing and managing Okta enterprise environments and IAM.
3+ years of production experience using Terraform to manage identity providers (specifically the Okta Terraform provider), custom modules, state management, and continuous deployment pipelines.
To be considered for this role, you must have the ability to commute to our Columbia, MD office three days a week. Hybrid.
Deep understanding of identity protocols including SAML 2.0, OAuth 2.0, OIDC, SCIM, and LDAP.
Experience with scripting and automation using Python, Bash, or PowerShell, and interacting directly with Okta REST APIs.

And Ideally:

Experience with Okta Workflows, Okta Identity Governance (OIG), or Privileged Access Management (PAM) integrations.
Experience operating within multi-cloud environments (AWS, GCP, Azure).
A proven track record in enterprise application onboarding automation and directory consolidation.

#LI-Hybrid #LI-LP1

This is the base pay range for this position. Compensation for the role will depend on a number of factors, including the candidate's qualifications, skills, competencies, location and experience, and may fall outside of the range shown. Employees are also eligible for variable compensation in addition to base pay (commission for sales roles, bonus for non-sales roles), depending on company and individual performance. Tenable also offers a variety of comprehensive and competitive benefits which include: medical, dental, vision, disability and life insurance; 401(k) retirement savings with company match; an employee stock purchase plan; an employee referral program; flexible spending accounts; an Employee Assistance Program (EAP); education assistance; parental leave; paid time off (PTO); company-paid holidays; health and wellness events; and community programs.

US Pay Range

$114,500—$152,500 USD

We’re committed to promoting Equal Employment Opportunity (EEO) at Tenable - through all equal employment opportunity laws and regulations at the international, federal, state and local levels. If you need a reasonable accommodation due to a disability during the application or recruiting process, please contact Recruiting@Tenable.com for further assistance.

Tenable Data Consent Statement

Tenable is committed to protecting the privacy and security of your personal data. Depending on your location, one or more of the following notices may apply to you:

General Applicant Privacy Notice
California Applicant Privacy Notice
EU/EEA/UK Applicant Privacy Notice

Asks for

Values