SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Better.com is rebuilding home finance as an AI-native platform, having funded over $110B in loans and raised $1.2B+ in equity. The company operates at scale while modernizing the $15 trillion mortgage industry through proprietary AI platforms (Tinman and Betsy).
You will own and advance Better's identity and access management program as the subject matter expert for Okta and the broader IAM ecosystem. This is a hands-on, high-impact role requiring deep expertise in identity standards and platform administration.
Key Responsibilities:
• Administer Okta end-to-end, including users, groups, applications, authentication policies, sign-on rules, network zones, and Okta Workflows across the full product suite.
• Configure and support Okta authentication standards: OAuth/OIDC, SAML, SCIM, Okta FastPass, Device Trust, device-bound SSO, and Device Access.
• Integrate and manage third-party SaaS applications in Okta with SSO setup, SCIM-based provisioning/de-provisioning, group push, and role mapping.
• Own Okta integrations with core enterprise systems, including Microsoft Entra ID/Active Directory and Workday as the HR system of record.
• Design and operate the joiner/mover/leaver lifecycle, ensuring timely, accurate, and auditable provisioning and de-provisioning across all in-scope applications.
• Ensure application integrations meet security best practices: least-privilege access, MFA enforcement, strong authentication policies, and well-structured group and role design.
• Partner with the Security team to design and implement Okta and application-level security controls, policies, and risk-based/adaptive access rules.
• Support audit, compliance, and access certification activities (SOX, SOC 2) with reporting, evidence collection, and periodic access reviews.
• Build and maintain Okta Workflows and other automations to streamline identity processes such as onboarding, offboarding, group membership, and access reviews.
• Provide tier 2 and tier 3 support for IAM-related issues, including triage, root-cause analysis, and remediation; serve as escalation point for the helpdesk.
• Document configurations, runbooks, and processes to support team continuity, onboarding, and audit readiness.
Requirements:
• 5+ years of experience in Identity and Access Management, IT security, or systems engineering.
• Hands-on experience administering Okta in production across the full product suite (users, groups, applications, authentication policies, Okta Workflows).
• Deep working knowledge of identity standards and Okta features: OAuth/OIDC, SAML, SCIM, Okta FastPass, Device Trust, device-bound SSO, and Device Access.
• Proven experience integrating third-party SaaS applications with Okta, including SSO and SCIM provisioning.
• Experience integrating Okta with Microsoft Entra ID/Active Directory.
• Experience integrating Okta with Workday as the HR system of record driving lifecycle events.
• Experience designing and operating joiner/mover/leaver lifecycle processes at scale.
• Experience partnering with Security teams to implement IAM controls, policies, and best practices for application integrations and access design.
• Experience providing tier 2 and tier 3 end-user support for identity-related issues.
• Strong problem-solving and troubleshooting skills with a structured, root-cause-driven approach.
• Strong written and verbal communication skills, with ability to work directly with business, IT, and security stakeholders.
Nice to Have:
• Okta Certified Administrator, Okta Certified Consultant, or Okta Certified Master.
• Experience building AI agents to assist with Okta and IAM management (automating joiner/mover/leaver tasks, triaging access requests, running access reviews, surfacing anomalous sign-in or policy events, providing self-service support through Slack or other channels).
• Experience scripting and integrating with REST APIs (Python, JavaScript) to extend Okta and IAM workflows.
• Experience with privileged access management (PAM) tools (CyberArk, BeyondTrust, Delinea, Keeper).
• Experience supporting IAM in regulated environments (SOX, SOC 2, HIPAA, PCI).
• Familiarity with Zero Trust principles and conditional/adaptive access design.
