Senior IAM Engineer (Okta)
Why Join Exadel
We’re an AI-first global tech company with 25+ years of engineering leadership, 2,000+ team members, and 500+ active projects powering Fortune 500 clients, including HBO, Microsoft, Google, and Starbucks.
From AI platforms to digital transformation, we partner with enterprise leaders to build what’s next.
What powers it all? Our people are ambitious, collaborative, and constantly evolving.
About the Client
The leading provider of vehicle lifecycle solutions, with headquarters in Chicago, enables the companies that build, insure, and replace vehicles to power the next generation of transportation. Its platform delivers advanced mobile, artificial intelligence, and car technologies. It connects a network of 350+ insurance companies, 24,000+ repair facilities, hundreds of parts suppliers, and dozens of third-party data and service providers. The customer's collective solutions enhance productivity and help clients deliver better experiences for end consumers.
What You’ll Do
Maintain and improve our identity-server — a Python/FastAPI service that handles Okta SSO authentication, JWT token signing, RBAC via Okta groups, and user redirect routing
Configure and manage Okta across SSO (SAML/OIDC), SCIM provisioning, MFA/Adaptive Auth, Workflows, and Lifecycle Management
Support multi-IDP federation — connecting external identity providers into our Okta tenant
Fix user provisioning and deprovisioning delays, automate manual access management workflows
Address security gaps in access controls and conduct access reviews
Maintain and extend CLI tooling for Okta user management (user search, group management, bulk assignment, role migration)
What You Bring
5+ years of experience in identity and access management engineering
Deep Okta expertise - both admin console configuration and programmatic integration via Okta APIs/SDKs
Hands-on experience with SSO protocols (SAML 2.0, OIDC/OAuth 2.0) and federation architectures
Production experience with Python (FastAPI, Flask, or Django) for building identity/auth services (other language is also acceptable)
Working knowledge of Terraform for managing IAM infrastructure as code
Experience with SCIM provisioning for automated user lifecycle management
Comfortable working independently as the sole IAM owner - you define problems and drive solutions without hand-holding
Familiarity with SOC 2 and/or HIPAA compliance requirements as they relate to access controls
English level
Intermediate+
Legal & Hiring Information
Exadel is proud to be an Equal Opportunity Employer committed to inclusion across minority, gender identity, sexual orientation, disability, age, and more
Reasonable accommodations are available to enable individuals with disabilities to perform essential functions
Please note: this job description is not exhaustive. Duties and responsibilities may evolve based on business needs
Your Benefits at Exadel
Exadel benefits vary by location and contract type. Your recruiter will fill you in on the details.
International projects
In-office, hybrid, or remote flexibility
Medical healthcare
Recognition program
Ongoing learning & reimbursement
Well-being program
Team events & local benefits
Sports compensation
Referral bonuses
Top-tier equipment provision
Exadel Culture
We lead with trust, respect, and purpose. We believe in open dialogue, creative freedom, and mentorship that helps you grow, lead, and make a real difference. Ours is a culture where ideas are challenged, voices are heard, and your impact matters.