About Us
Advisory Solutions is a white-glove, bespoke IT consulting firm. Our team partners closely with organizations to design, implement, and support technology environments that keep employees productive and systems secure. We pride ourselves on a client-first culture, deep technical expertise, and a commitment to continuous improvement.
Position Summary
This is a client-facing and stakeholder-facing engineering role. You will own the technical relationship with clients across their identity environments, serving as a trusted advisor on discovery calls, kickoffs, QBRs, and any engagement that requires an identity engineering presence. You will be embedded in active projects from day one, not brought in afterward.
Identity is rarely the work in front of a client. It is the work behind everything else they do. New hires cannot start work without it. Executives cannot authenticate without it. Auditors cannot pass an access review without it. That is why we believe the best identity solutions come from engineers who are close to the problem: present in client conversations, fluent with internal partners across Sales, Customer Success, Project Management, and Service Delivery, and genuinely invested in the experience of the people who depend on the access you design.
You will build and maintain identity environments across our client portfolio with a primary focus on Okta and a strong foundation in Entra ID. You will design lifecycle automation, drive Infrastructure as Code adoption, integrate identity governance into the client's broader security posture, and serve as the primary escalation point for the service desk on identity matters. You will also be a core contributor on identity infrastructure projects that come in through the door.
Key Responsibilities
Client Engagement
- Participate in discovery, kickoff, and project scoping calls as the engineering voice on identity; ask good questions and translate client context into technical decisions.
- Where necessary, attend ongoing client check-ins when engineering presence is warranted; build familiarity with each client's directory, authentication posture, application catalog, and identity governance maturity.
- Partner with Customer Success Managers and Project Managers to ensure clients feel supported and informed, especially during complex migrations, access reviews, audits, or identity incidents.
- Communicate trade-offs clearly to both technical and non-technical stakeholders; know when to escalate and when to ask for research time.
- Build new identity tenants and onboarding workflows as new clients are brought on, owning the technical side of that process end-to-end.
Internal Stakeholder Engagement
- Partner with Sales during pre-sales and scoping to size identity work accurately and surface risk before contracts are signed.
- Coordinate closely with Project Management on identity project execution: timelines, dependencies, credential handoffs, and structured cutovers.
- Brief Customer Success and the Service Desk on every client's identity environment so the broader team can support clients without single points of failure.
- Work fluidly with the endpoint and automation functions; identity decisions ripple through Jamf, Intune, and the rest of the toolstack, and the team needs you to flag that proactively.
- Contribute to internal weekly L10 meetings and quarterly Rock planning on identity initiatives that affect the practice as a whole.
Identity Platform Management
- Manage and maintain Okta tenants across multiple client environments, including authentication policies, lifecycle management, federation (inbound and outbound), SAML, OIDC, and SCIM integrations, and Okta Identity Governance.
- Design and maintain Entra ID configurations: Conditional Access, Privileged Identity Management, entitlement management, and hybrid identity.
- Build and harden Okta Workflows for lifecycle automation, access provisioning, and integration with downstream systems, including HRIS platforms, Google Workspace, Microsoft 365, Slack, and client-specific apps.
- Maintain awareness of adjacent identity platforms across the client portfolio (Google Workspace as IdP and 1Password) and advise on their configuration as needed.
- Run periodic identity hygiene reviews: stale accounts, dormant sessions, MFA coverage, privileged role assignments, and lifecycle drift.
Automation & Solution Development
- Drive Infrastructure as Code adoption across client identity environments using Terraform (Okta and Microsoft Graph providers preferred) so configuration is repeatable, peer-reviewable, and auditable.
- Design, test, and deploy joiner, mover, and leaver workflows, access request flows, and certification campaigns; incorporate scripting (Python) where Workflows and native tooling fall short.
- Research and evaluate new identity tools, frameworks, and approaches; present findings and proposals to engineering leadership and client stakeholders.
- Ensure all changes are validated in a staging or sandbox tenant before production rollout.
Internal Escalation & Mentorship
- Serve as the go-to escalation point for the service desk and other team members on identity issues; be accessible, not just available.
- Lead on identity incidents with a wide impact (an authentication outage, a misconfigured policy, a compromised credential): triage, communicate, contain, and drive the postmortem and structural fix.
- Partner with the Director of Engineering to monitor industry trends and develop proactive strategies for the identity practice.
- Share knowledge actively to raise the identity literacy of the broader team. Transfer the reasoning, not just the fix.
Documentation
- Maintain comprehensive runbooks, configuration records, and procedures in Confluence.
- Create and update internal and external-facing documentation for each client environment, including authentication policy decision frameworks and reusable identity standards.
Qualifications
Required
- 3 to 5+ years of hands-on experience administering identity platforms in an MSP, consulting, or multi-tenant environment. MSP experience is strongly preferred. In its absence, demonstrable experience operating across more than three concurrent identity environments or tenants is required.
- Demonstrated comfort working directly with clients and cross-functional internal stakeholders. Discovery calls, technical briefings, project standups, and ongoing relationships are part of the job, not the exception.
- Deep working knowledge of Okta: authentication policies, lifecycle management, Workflows, Okta Identity Governance, federation, and SAML, OIDC, and SCIM application integration.
- Strong working knowledge of Entra ID: Conditional Access, Privileged Identity Management, entitlement management, and hybrid identity.
- Working proficiency with Infrastructure as Code applied to identity. Terraform with the Okta and Microsoft Graph providers is preferred; equivalent experience with Pulumi or another declarative tool is acceptable.
- Solid understanding of the underlying identity protocols: SAML 2.0, OIDC, OAuth 2.0, SCIM, and WS-Federation.
- Excellent written and verbal communication skills, with the ability to adapt to both technical and non-technical audiences.
Preferred
- Okta Certified Administrator on hire; Okta Certified Consultant strongly preferred.
- Microsoft Certified: Identity and Access Administrator Associate (SC-300).
- Familiarity with version control workflows (Git, GitHub, peer-reviewed pull requests) applied to identity configuration.
- Experience integrating identity with broader security tooling: SIEM, CASB, DLP (e.g., Nightfall AI), or zero-trust access platforms (e.g., Cloudflare One).
- Scripting fluency in Python for identity automation.
What We Offer
- Competitive salary range: $100,000 - $115,000
- Health, dental, and vision insurance.
- 401(k) with employer match after 1 year of employment, during the enrollment period.
- Budget for professional development and certifications, including Okta and Microsoft identity exam fees.
- Access to sandbox tenants, lab hardware, and software licenses for hands-on learning and testing.
- A collaborative, learning-oriented team culture that values curiosity and technical growth.
Culture & Expectations
We expect every engineer to start as a consultant. That means understanding the why behind every recommendation, being comfortable in a client conversation, and staying curious enough to spin up a sandbox tenant when you need to learn something new.
The engineer who thrives here sees client proximity and cross-functional collaboration as advantages rather than interruptions. The more context you have, with the client and with your colleagues across Sales, Customer Success, Project Management, and the Service Desk, the better your solutions will be. Our clients trust us to be their technology partner, and that trust is built through deep expertise, honest communication, and genuine investment in their success.
Pay: $100,000.00 - $115,000.00 per year
Benefits:
- 401(k)
- 401(k) matching
- Dental insurance
- Health insurance
- Professional development assistance
- Vision insurance
Application Question(s):
- How many years of experience do you have administering Okta?
- How many concurrent Okta/EntraID environments have you managed in the last two years?
- Do you have hands-on experience using Terraform or equivalent IaC to manage identity platforms specifically?
- Have you ever worked in an MSP?
- Do you hold an active Okta Certified Administrator credential or higher?
Work Location: Remote
