Identity & Access Management Engineer - Okta

AbbVie’s mission is to discover and deliver innovative medicines and solutions that solve serious health issues today and address the medical challenges of tomorrow across key therapeutic areas including immunology, oncology, neuroscience, and Allergan Aesthetics.

Join AbbVie’s Information Security & Risk Management (ISRM) team as an IAM Federation Services Engineer. In this role, you will design, implement, and manage enterprise directory and authentication solutions across a global workforce of 80,000+ internal users and customer identities. Leveraging Okta, Microsoft Entra ID, and PingFederate, you will empower global teams to securely access technology and data through modern SSO, CIAM, and MFA standards.

Key Responsibilities

• Federation Solution Design: Design and implement federated Identity and Access Management (IAM) architectures aligned with enterprise business and security requirements.
• System & Cloud Integration: Integrate identity federation technologies with core enterprise and cloud systems using industry standards including SAML 2.0, OIDC, and OAuth 2.0.
• Custom Authentication & APIs: Develop and maintain custom login and authentication experiences using Okta APIs, SDKs, and widget-based sign-in flows.
• MFA Configuration: Configure, maintain, and support multi-factor authentication (MFA) technologies, including Okta Verify, PingID, MS Authenticator, FIDO2, biometrics, and push/OTP authenticators.
• Troubleshooting & Optimization: Diagnose and resolve complex authentication, authorization, single sign-on (SSO), and automated user lifecycle provisioning breaks.
• Infrastructure Scalability: Monitor, optimize, and maintain high-performance federation infrastructure serving 80,000+ global users.
• PowerShell Automation: Write and execute advanced PowerShell scripts to automate administrative identity workflows and system management tasks.
• Cross-Functional Support: Provide technical guidance, documentation, and operational support to system administrators, cross-functional partners, and third-party vendors.

Requirements

Experience & Education

• Bachelor’s degree with 5+ years of professional experience OR Master’s degree with 4+ years of professional experience in Identity and Access Management (IAM) or Information Security.
• 4+ years of hands-on experience specifically with Okta and PingFederate.

Technical Capabilities

• Proven hands-on experience with Okta Identity Engine (OIE) for Customer Identity and Access Management (CIAM) workflows (Sign-in Widget, self-service registration, B2C/B2B identity patterns).
• Advanced proficiency in PowerShell scripting for identity automation and directory management.
• Deep understanding of federation protocols and concepts (SAML 2.0, OpenID Connect, OAuth 2.0, SSO, MFA, user lifecycle management).
• Demonstrated experience supporting large-scale enterprise environments (10,000+ users required; 80,000+ users strongly preferred).

Soft Skills

• Strong analytical problem-solving skills for diagnosing complex identity logs and authentication breaks.
• Excellent written and verbal communication skills for documenting technical processes and collaborating across global teams.

Preferred Qualifications

• Industry certifications in federation technologies (e.g., Okta Certified Administrator, PingFederate / PingOne Certified, or Microsoft Entra ID Certified).
• Working knowledge of cybersecurity compliance frameworks and standards (e.g., NIST, ISO 27001).

Benefits & Total Rewards

• Comprehensive Healthcare: Medical, dental, and vision insurance coverage for eligible employees and families.
• Retirement & Savings: 401(k) plan with company matching contributions.
• Paid Time Off: Paid vacation, sick leave, and company-recognized holidays.
• Incentives: Eligible to participate in AbbVie short-term incentive and bonus programs.