Sen Teacher

MBI Staffing is seeking anIAM Senior Admin and SolutionsArchitect. This person will act as a seniorengineer and solutions architect for the Global Identity &Access Management platform. Must have experience with Okta IdentityManagement and be comfortable designing solution patterns fortypical and custom Identity frameworks across both infrastructureand development life cycles. The ideal candidate should have 3-4years of experience in administering and engineering an IdentityProvider, including base SSO setup via SAML/OpenID Connect, B2BFederation Connection setup, and with standard expression logic andPowerShell scripts used in analytical reporting and customattribute patterns.Whatthis jobinvolves:Thisperson will be working closely with internal customers and externalclients as a fellow member of a Global IAM team as well ascross-functional global developers seeking to instrumentapplications for single sign-on. This person will serve as thedepartment expert for architectural solution design anddocumentation (Product Roadmaps), including PowerShell scripting tomaintain and design analytics reports in Okta as well as design andimplement custom application-level expression language regardingattributemanipulation.RequirementsSoundlike you? Before you apply, this is what we are lookingfor:RequiredSkills:IdentityProvider EngineeringSkills:PowerShellScripting & Okta Expression languages for attributemanipulation and reporting within OktaIdPCreateor modify SSO connections to SaaS Providers usingOktaCreateor modify B2B SSO connections from external clients to internal JLLservice offerings usingOktaSocialAuthentication through Google, Self-registration, etc., within OktaTroubleshootany faulty IdP or SP SSO connections at the application, user, orclientlevelSecurityAssertion Markup Language (SAML 2.0), WSFED, OpenID Connect/OAuthas it relates to enabling applications for authentication servicesandSSOSupportEnd Users with authentication or SSO issues through ticket queuemanagement as a Level 3engineerSupportdevelopers attempting to instrument their applications withauthentication services and SSO throughOktaArchitectureSkills:Interestin staying current with Okta product features and enhancements andturning those into deliverable solutions and roadmapitemsAbilityto maintain and develop Identity product roadmaps by gatheringrequirements and maintaining close relationships with consumers andGlobal Enterprise ArchitecturedivisionsProductExperience & TechnicalSkills:OktaIdentity Management - Life-Cycle Management, Adaptive MFA, APIAccess Management,etc.PowerShellscripting - Custom application expression statements for attributeor account-levelmanipulationActiveDirectory (Azure) &LDAPActiveDirectory Federation Services(ADFS)Experiencewith Ping Federate is welcome but notrequiredExperiencewith development, specifically object-oriented languages, isdesirableHARDSKILLS: Significantexposure to Okta IdP tool across the following patterns: SAML,OpenID Connect, WSFED, Delegated Authentication via ActiveDirectory, Multi-Factor Authentication, Consumer-OrientedAuthentication (Social Auth), Radius(Citrix)Comfortableconstructing & documenting a product roadmap withinIdentity & AccessManagementComfortabledocumenting solution alternative patterns and offeringrecommendations both within and outside of the global identityteamExposureto Windows Azure and Office 365, specifically Azure ActiveDirectoryExcellentknowledge of B2B Identity Federation setup/enhancements, outboundSSO, and B2B connections through IdPsInterfacewith client-side IdP Architects, Administrators, Developers, andEngineersRecognizethe technical dependencies and impacts across the Program/projectsthat involve and require identity and accesssolutionsExperiencemanaging level 2+3 tickets and dealing with user-level supportissues for a Global company that operates 24x7. Individual must bewilling to work within a monthly on-call rotationscheduleExcellentwritten and oral communication skillsLocation:Remotein the U.S. - CST or ESTzonesThisis a long-termpositionMBIsCOMMITMENT TOYOU:Our job isto showcase our talented, professional candidates to globallyrecognized organizations where work/life balance is second to none!Our expert candidates solve the worlds problems--from every day tothe epic, from the mundane to the monumental.MBIsCORE:MBIsfoundation is built upon our commitment and passion for finding thebest IT talent in the world and for matching that talent to ourcustomers needs. MBI attracts highly skilled, quality people, andwe expect a high level of commitment from all our team members todeliver qualitywork.Sound like you? Before you apply, this is what we are looking for:Required Skills: Identity Provider Engineering Skills: PowerShellScripting & Okta Expression languages for attributemanipulation and reporting within Okta IdP Create or modify SSOconnections to SaaS Providers using Okta Create or modify B2B SSOconnections from external clients to internal JLL service offeringsusing Okta Social Authentication through Google, Self-registration,etc., within Okta Troubleshoot any faulty IdP or SP SSO connectionsat the application, user, or client level Security Assertion MarkupLanguage (SAML 2.0), WSFED, OpenID Connect/OAuth as it relates toenabling applications for authentication services and SSO SupportEnd Users with authentication or SSO issues through ticket queuemanagement as a Level 3 engineer Support developers attempting toinstrument their applications with authentication services and SSOthrough Okta Architecture Skills: Interest in staying current withOkta product features and enhancements and turning those intodeliverable solutions and roadmap items Ability to maintain anddevelop Identity product roadmaps by gathering requirements andmaintaining close relationships with consumers and GlobalEnterprise Architecture divisions Product Experience &Technical Skills: Okta Identity Management - Life-Cycle Management,Adaptive MFA, API Access Management, etc. PowerShell scripting -Custom application expression statements for attribute oraccount-level manipulation Active Directory (Azure) & LDAPActive Directory Federation Services (ADFS) Experience with PingFederate is welcome but not required Experience with development,specifically object-oriented languages, is desirable HARD SKILLS:Significant exposure to Okta IdP tool across the followingpatterns: SAML, OpenID Connect, WSFED, Delegated Authentication viaActive Directory, Multi-Factor Authentication, Consumer-OrientedAuthentication (Social Auth), Radius (Citrix) Comfortableconstructing & documenting a product roadmap within Identity& Access Management Comfortable documenting solutionalternative patterns and offering recommendations both within andoutside of the global identity team Exposure to Windows Azure andOffice 365, specifically Azure Active Directory Excellent knowledgeof B2B Identity Federation setup/enhancements, outbound SSO, andB2B connections through IdPs Interface with client-side IdPArchitects, Administrators, Developers, and Engineers Recognize thetechnical dependencies and impacts across the Program/projects thatinvolve and require identity and access solutions Experiencemanaging level 2+3 tickets and dealing with user-level supportissues for a Global company that operates 24x7. Individual must bewilling to work within a monthly on-call rotation scheduleExcellent written and oral communication skills Location: Remote inthe U.S. - CST or EST zones This is a long-term position MBI'sCOMMITMENT TO YOU: Our job is to showcase our talented,professional candidates to globally recognized organizations wherework/life balance is second to none! Our expert candidates solvethe world's problems--from every day to the epic, from the mundaneto the monumental. MBI's CORE: MBI's foundation is built upon ourcommitment and passion for finding the best IT talent in the worldand for matching that talent to our customer's needs. MBI attractshighly skilled, quality people, and we expect a high level ofcommitment from all our team members to deliver qualitywork.