6+ month contract
Peachtree Corners, GA (Hybrid)
Job Overview
We are seeking an experienced Identity & Access Engineer to support enterprise identity and access management initiatives, including platform modernization, application integrations, authentication migrations, and identity lifecycle automation.
This hands-on role focuses on enterprise identity platforms, directory services, single sign-on (SSO), multifactor authentication (MFA), application federation, and hybrid identity environments. The engineer will help strengthen security, streamline authentication, improve identity administration, and deliver reliable identity services across complex enterprise environments.
The ideal candidate combines strong technical expertise with the ability to independently execute identity engineering projects, troubleshoot complex authentication issues, automate identity processes, and coordinate integrations across multiple technical teams.
Responsibilities
- Identity Platform Engineering: Configure, implement, maintain, and troubleshoot enterprise identity platforms, including Okta, Duo, Active Directory, and Microsoft Entra ID.
- SSO & MFA Migration: Support migrations from legacy authentication and MFA solutions to modern identity platforms. Configure authentication policies, validate application functionality, and coordinate production cutovers.
- Application Federation: Implement and troubleshoot authentication and federation integrations using SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and related protocols.
- Directory Services Integration: Configure virtual directory services and LDAP integrations to support authentication for legacy applications and enterprise resources.
- Identity Lifecycle Automation: Integrate identity platforms with HR systems and other enterprise applications to automate user provisioning, profile updates, and deprovisioning.
- Hybrid Identity Management: Configure and troubleshoot directory synchronization, identity mapping, authentication, and access across multiple Active Directory domains and identity platforms.
- Identity Integration & Migration: Execute identity integration and migration initiatives associated with organizational changes, acquisitions, and consolidation of identity environments.
- Automation & Scripting: Develop PowerShell scripts, REST API integrations, and automated workflows to improve identity administration, reduce manual effort, and increase provisioning accuracy.
- Technical Project Delivery: Independently manage engineering activities from requirements gathering and dependency analysis through implementation, testing, cutover, validation, documentation, and operational handoff.
- Security & Troubleshooting: Diagnose complex authentication and authorization issues, implement secure configurations, and support least-privilege access practices.
- Cross-Functional Collaboration: Partner with identity, security, infrastructure, and application teams to resolve technical dependencies and deliver successful integrations.
- Documentation & Knowledge Transfer: Create technical documentation, integration diagrams, troubleshooting guides, and operational runbooks while transferring knowledge to support teams.
Requirements
- 5+ years of experience in identity and access management engineering within enterprise environments.
- Hands-on experience implementing, configuring, and troubleshooting Okta and Duo.
- Strong knowledge of Active Directory, Microsoft Entra ID, LDAP, and hybrid identity architectures.
- Demonstrated experience implementing SSO and MFA integrations using SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC).
- Experience migrating applications between identity providers or authentication platforms, including testing, validation, and cutover planning.
- Experience with virtual directory services, LDAP proxying, identity mapping, and authentication across multiple directory environments.
- Experience implementing automated identity provisioning and deprovisioning, including HR-driven lifecycle processes.
- Knowledge of SCIM, directory synchronization, and identity provisioning technologies.
- Strong PowerShell scripting skills and experience using REST APIs to automate identity administration and integrations.
- Ability to independently deliver complex identity engineering projects from requirements through implementation and operational handoff.
- Strong troubleshooting skills across authentication flows, federation, directory services, and application access.
- Experience collaborating with security teams, application owners, infrastructure engineers, and external technology partners.
- Excellent technical documentation, communication, and knowledge transfer skills.
- Okta certifications, such as Okta Certified Administrator or Okta Certified Consultant.
- Experience integrating identity platforms with HR systems, such as Workday.
- Experience with Radiant Logic or comparable virtual directory technologies.
- Experience supporting identity integration initiatives following mergers and acquisitions.
- Familiarity with privileged access management and enterprise identity security best practices.
Estimated Min Rate: $60.00
Estimated Max Rate: $70.00
What’s In It for You?
We welcome you to be a part of the largest and legendary global staffing companies to meet your career aspirations. Yoh’s network of client companies has been employing professionals like you for over 65 years in the U.S., UK and Canada. Join Yoh’s extensive talent community that will provide you with access to Yoh’s vast network of opportunities and gain access to this exclusive opportunity available to you. Benefit eligibility is in accordance with applicable laws and client requirements. Benefits include:
- Medical, Prescription, Dental & Vision Benefits (for employees working 20+ hours per week)
- Health Savings Account (HSA) (for employees working 20+ hours per week)
- Life & Disability Insurance (for employees working 20+ hours per week)
- MetLife Voluntary Benefits
- Employee Assistance Program (EAP)
- 401K Retirement Savings Plan
- Direct Deposit & weekly epayroll
- Referral Bonus Programs
- Certification and training opportunities
Note: Any pay ranges displayed are estimations. Actual pay is determined by an applicant's experience, technical expertise, and other qualifications as listed in the job description. All qualified applicants are welcome to apply.
Yoh, a Day & Zimmermann company, is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.
Visit https://www.yoh.com/applicants-with-disabilities to contact us if you are an individual with a disability and require accommodation in the application process.
For California applicants, qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. All of the material job duties described in this posting are job duties for which a criminal history may have a direct, adverse, and negative relationship potentially resulting in the withdrawal of a conditional offer of employment.
It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
By applying and submitting your resume, you authorize Yoh to review and reformat your resume to meet Yoh’s hiring clients’ preferences. To learn more about Yoh’s privacy practices, please see our Candidate Privacy Notice: https://www.yoh.com/privacy-notice
Stay Safe During Your Job Search
Fraudulent recruiting communications have become increasingly common. Emails from Yoh recruiters will only come from an @yoh.com email address. Yoh will never ask candidates to pay fees, purchase equipment, send gift cards, or transfer funds as part of the recruiting or hiring process. If you receive a communication that appears suspicious or requests payment, contact Yoh directly before responding or sharing personal information.
