Identity Security Engineer (Okta & Identity Governance) – Bangkok Based, Relocation provided

Job Duties

• Design and deploy Okta Identity Governance modules including Access Requests, Certifications, and Entitlement Management.

• Develop custom workflows and policies within Okta IGA to enforce Segregation of Duties rules during provisioning.

• Create access certification campaigns and remediation workflows to satisfy internal and external audit requirements.

• Manage Okta organization architecture using Terraform to ensure version control and minimize configuration drift.

• Build Okta Workflows for lifecycle automation, custom notifications, and advanced logic beyond native features.

• Implement Multi-Factor Authentication policies, Risk-Based Authentication, and Global Session Policies across the enterprise.

• Develop automation scripts using Okta APIs, Event Hooks, and Workflows for seamless application provisioning.

• Partner with Detection Engineering teams to ingest Okta System Logs into the SIEM for proactive threat monitoring.

• Collaborate with GRC and Audit teams to support compliance with SOX and NIST requirements.

• Ensure all identity centric security controls are measurable, auditable, and consistently enforced.

Requirements

• Operate Okta in a high-volume production environment with a focus on identity-centric security.

• Configure Okta Identity Governance components including Access Requests and Review Campaigns.

• Utilize Terraform and the Okta Provider to manage complex infrastructure as code.

• Write scripts in Python, JavaScript, or TypeScript for custom API integrations and automation.

• Demonstrate deep technical knowledge of identity lifecycle management and lifecycle automation.

• Integrate downstream applications with central identity platforms for automated provisioning.

• Apply security frameworks such as NIST to enterprise identity architecture.

Qualifications

• Hold a minimum of 6 years of hands-on experience in Okta production environments.

• Maintain proficiency in Infrastructure-as-Code methodologies.

• Possess strong scripting capabilities for modern API-driven environments.