Skip to content

Open nowPosted 33 hours ago

Zero Trust Security Engineer - Okta

asrcfh394 open roles

Where
Quantico, VA 22134, USA
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowZero Trust Security Engineer - Oktaasrcfh · Quantico, VA 22134, USA
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on asrcfh's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

7.8% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 1.6%1 day
  2. 3.4%3 days
  3. 7.8%7 days
  4. 14.3%14 days
  5. 33.7%30 days
This job: posted 33 hours ago

The posting

Position Description: ASRC Federal is actively hiring an Intermediate Okta Engineer in support of our Defense Counterintelligence Security Agency (DCSA) program based out of Quantico, VA. We are seeking a skilled and highly motivated Identity and Access Management (IAM) professional to join our dynamic cybersecurity team. The ideal candidate will be responsible for the administration, configuration, maintenance, and integration of our Okta Identity Cloud platform, ensuring secure, seamless, and compliant access to DCSA applications and resources. This role will focus on leveraging Okta's core features, including Single Sign-On (SSO), Multi-Factor Authentication (MFA), Lifecycle Management (LCM), Universal Directory, and Okta Workflows—to support our Zero Trust architecture and secure our hybrid workforce. This is primarily a Telework position with a requirement to be onsite at least two (2) days a week or as needed at Quantico Marine Corps Base VA. Additional onsite time may be required during initial onboarding and program integration. Minimum Requirements: 

Minimum of 5 years of hands-on experience administering, configuring, and supporting the Okta Identity Cloud platform in an enterprise or federal environment. IAM Expertise: Strong understanding of identity-centric security, directory services (Active Directory, LDAP), and modern federation protocols (SAML 2.0, OIDC, OAuth 2.0). Active Top-Secret Clearance REQUIRED, eligible to be upgraded to TS/SCI Must meet 8570 certification requirements at the time of hire.  IAT Level II (e.g., Security+ CE, CCNA Security, CySA+, GICSP, GSEC, SCCP or higher tiered 8570 certification Bachelor’s Degree, in Cybersecurity, Information Systems Management or a related field or an equivalent combination of military service and/or at least five (5) years of significant, relevant work experience Desired Certifications: Official Okta certifications are highly desired:

Okta Certified Professional Okta Certified Administrator Okta Certified Consultant or Okta Certified Developer (plus)

Responsibilities: Solution Administration and Configuration

Manage, configure, and maintain the daily operations of the Okta Identity Cloud platform, including Universal Directory, Single Sign-On (SSO), and Multi-Factor Authentication (MFA). Develop, implement, and enforce granular sign-on policies, adaptive MFA, and application-level access controls.

  Lifecycle Management & Automation

Design, implement, and troubleshoot automated provisioning, deprovisioning, and user lifecycle workflows (Lifecycle Management) across various target applications. Utilize and configure Okta Workflows or scripting (e.g., PowerShell, Python) to automate manual IAM tasks and onboarding processes.

  Directory & Application Integration

Connect and integrate Okta with authoritative source directories (Active Directory, LDAP, HR systems) and cloud environments (AWS, Azure AD). Onboard and integrate SaaS, web-based, and legacy on-premise applications using SAML, OIDC, WS-Fed, and SCIM protocols.

  Security & Compliance Integration

Collaborate with cybersecurity teams to integrate Okta system logs with Security Information and Event Management (SIEM) tools (e.g., Splunk) for security monitoring and audit reporting. Support the implementation of Zero Trust architecture by aligning Okta authentication policies with endpoint posture assessment tools (e.g., Palo Alto GlobalProtect, crowd-sourced agents).

  Troubleshooting and Support

Serve as the Tier-2/Tier-3 Subject Matter Expert (SME) for Okta-related issues, troubleshooting authentication failures, provisioning errors, federation mismatches, and user access issues.

  Documentation and Training

Create and update high-quality engineering runbooks, standard operating procedures (SOPs), architecture diagrams, and user guides. Train and mentor junior support technicians and help desk staff on basic Okta troubleshooting and identity lifecycle actions.

 Work Environment and Physical Demands: 

This is primarily a Telework position with a requirement to be onsite at least two (2) days a week or as needed at Quantico Marine Corps Base VA. Additional onsite time may be required during initial onboarding and program integration. If alternate worksite is other than DCSA facilities or corporate office space, must have the reliable ability to communicate over voice (cell phone preferred) and stable, capable internet connection Must be able to communicate complex technical ideas to a diverse customer base both verbally and in written form

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against asrcfh's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on asrcfh's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    asrcfh's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.