Mutual Opportunities
Identity and Access Management (IAM) Engineer – Authentication/Okta Consultant
Springfield, Massachusetts; Boston, Massachusetts
Thank you to our employees for voting us one of the top places to work in Massachusetts for five consecutive years!
Overview
A career with us means you’ll work alongside exceptional people and be empowered to reach your professional and personal goals. Our employees are at the foundation of what enables MassMutual to deliver on our purpose to help people secure their futures and protect the ones they love.
We embrace the idea that we all are stronger and better through our support for one another. We strive to create a culture where employees feel valued and are celebrated for who they are.
“Since our founding in 1851, mutuality has put our policyowners at the center of everything we do. At our core, we’re a company of people helping people in their time of need, and that spirit extends to the culture we’ve built at our company. Our employees support and rely on each other each day, collaborating to deliver the best solutions for our customers and help millions more secure their future and protect the ones they love.”
Job Description
Identity and Access Management (IAM) Engineer – Authentication/Okta Consultant
The Team/Job
The IAM Engineer – Authentication/Okta Consultant is responsible for designing, implementing, and managing identity and access management solutions with a focus on authentication and Okta integration. This role involves ensuring secure access to various systems and applications, maintaining compliance with security policies, and enhancing user experience through efficient authentication processes.
The Opportunity
Do you want to be part of a team that encourages your growth, supports your ambitions and makes it a priority for you to reach your goals? Is helping people part of who you are? At MassMutual, we help millions of people find financial freedom, offer financial protection and plan for the future. We do this by building trust with our customers by being knowledgeable problem solvers and prioritize their needs above all else. Join our team to lead the charge in securing our organization's digital assets and improving user access experiences through cutting-edge IAM solutions. If this sounds like a fit, we’re looking to hire IAM Engineer – Authentication/Okta Specialist to join our Security Platform Engineering team.
The Impact/Responsibilities
- Design, implement, deploy, and maintain IAM solutions including multi-factor authentication (MFA), single sign-on (SSO) using Okta to support IAM strategic initiatives
- Collaborate across lines of business to consult and guide projects as needed to follow best practices around identity and access management
- Develop and configure Okta platform enhancements, including newly developed features
- Provide technical support to Okta support staff, including operations and supporting teams
- Develop and support security enhancements to support SOC and combat ongoing cybersecurity threats
- Buildout and maintenance of supporting documentation to be used by support staff
- Design, implement and manage Okta workflows to facilitate IAM solutions as required, including integration with various applications and systems, to provide seamless and secure access.
- Stay up-to-date with the latest IAM technologies, trends, and best practices to continually enhance our identity management capabilities.
The Minimum Qualifications
- Bachelor’s degree in Computer Science, Information Technology, or a related technical field
- 5+ years of experience in IAM Engineering or Security Engineering or IT Engineering
- 3+ years of experience with Okta, including advanced configurations and troubleshooting
- 3+ years of experience in Authentication with industry standard protocols: SAML, OAuth, OpenID Connect
Preferred Qualifications
- Experience with cloud-based IAM solutions and integrations.
- Knowledge of scripting languages (e.g., Python, PowerShell) for automation of IAM processes.
- In-depth knowledge of Okta APIs and integrations with on-prem and cloud systems
- Strong troubleshooting skills, including Okta, REST APIs, and other web based traffic
- Ability to work independently and achieve results as directed
- Ability to script in at least one language (Python, etc)
- Familiarity with IAM concepts like privileged access, zero trust, and access governance
- Experience with building policies in Okta, including global session, application, and MFA enrollment policies
- Familiarity with LDAP and AD based Okta agents, including patching and troubleshooting
- Knowledge of best practices around lifecycle management of AD sourced and Okta sourced identities, including build and support of SCIM/API integrations
- Familiarity with PKI
- Okta Certified Administrator/Consultant prior experience
- Familiarity with security frameworks and regulations (e.g., NIST, GDPR, HIPAA) that impact identity and access management.
- Excellent analytical and troubleshooting skills, with the ability to diagnose and resolve complex technical issues.
- Strong verbal and written communication skills, capable of effectively collaborating with technical and non-technical stakeholders.
- Experience with identity federation and cross-domain authentication.
- Project management skills and experience leading IAM projects from conception to completion.
#LI-SC1
MassMutual is an Equal Employment Opportunity employer Minority/Female/Sexual Orientation/Gender Identity/Individual with Disability/Protected Veteran. We welcome all persons to apply. Note: Veterans are welcome to apply, regardless of their discharge status.If you need an accommodation to complete the application process, please contact us and share the specifics of the assistance you need.
MassMutual will accept applications on an ongoing basis until such time as a candidate has been offered employment. The job description includes the main duties of this position, which may evolve over time. You may be required to perform other duties not listed.
It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment.
Salary Range: $110,400.00-$144,900.00
Hiring Process
Explore
Explore our open jobs by clicking 'search jobs' to find a position that aligns with your experience and skills. You may also consider joining our Talent Network.
Apply
Click the “apply” button on that job posting to complete and submit your application. Your application will be reviewed by a recruiter, which, due to the volume of applications received, may take some time as we carefully consider each application.
Screen
After your application has been reviewed, if you meet the qualifications for the role, a recruiter will reach out to you to start a conversation.
Interview
If you are invited for an interview, you will be scheduled to meet with the hiring manager and hiring team.
Offer
If you are extended an offer to join MassMutual and accept, your start will be contingent upon a satisfactory background check.
Hire
If you accept the offer, we will be so excited to welcome you to the MassMutual community!
If you need an accommodation to complete the application process, please contact us and share the specifics of the assistance you need.
By the numbers*
- 88% of employee respondents say they are proud to work at MassMutual
-
90
% of employee respondents say they feel encouraged to bring forth new ideas - 86% of employee respondents say MassMutual cares about and supports the well-being of their employees
*Source: 2024 MassMutual employee engagement survey
Award-Winning Culture
MassMutual is guided by a single purpose: We help people secure their future and protect the ones they love. As a company operated for the benefit of our members and participating policyowners, we are defined by mutuality and our vision to provide financial well-being for all Americans. It’s more than our company structure — it’s our way of life. We are a company of people protecting people. Our company exists because people are willing to share risk and resources and rely on each other when it counts.
We strive to build a thriving community where everyone is valued, included, and feels that they belong.
At MassMutual, we Live Mutual.
How We Work
MassMutual’s flexible workplace approach combines the importance of connecting in person and the flexibility of working remotely. Our hybrid model puts collaboration first with employees coming in at least three days per week to our spectacular campus settings and also enjoying the flexibility of remote Fridays, company-wide remote weeks, and a bank of flexible remote weeks to use throughout the year.
Benefits for the whole you (and your loved ones)
There’s more to your life than your job and there’s more to your aspirations than a paycheck. We take a holistic view of compensation and benefits that provides the flexibility to create a healthy balance in your life for work, family, and community. We offer the benefits you’d expect, like medical, dental, 401(k), and generous vacation time, but we also offer ones you might not expect, like three paid days for volunteering, a $1,250 annual Well-Being Wallet, and up to 320 hours of caregiver leave.
Explore some of our offerings below. Benefit details can be found here.
Why MassMutual?
Kevin
Compliance Consultant
Seth
Service Management Consultant
Kymberly
Head of Experience Journey Mapping
where we work
Springfield Office
1295 State Street, Springfield, MA
Boston Office
10 Fan Pier Blvd, Boston, MA
New York Office
2 Park Ave,
New York, NY
Virtual
New Job Openings
Sign up for job alerts
Don't see what you're looking for? Sign up for job alerts and we'll notify you when jobs become available.
Job recruiter fraud is a scam by impostors posing as recruiters or representatives of a company promoting fake job opportunities to job seekers.
MassMutual will never ask job candidates to pay any kind of fee, make cash or check advancements, cash checks or make an investment in any product or service or provide information such as credit card numbers or banking PIN numbers as part of our hiring process.
If you are contacted by anyone asking for information outlined above, it is likely fraudulent. If you have any concerns about the veracity of a request, please contact us to verify its legitimacy.
Share This Job