IAM Federation Services (Okta) Engineer

About the role

Join AbbVie's Information Security & Risk Management (ISRM) team as an IAM Federation Services Engineer, where we empower our partners to succeed by delivering the knowledge, tools, and support needed to leverage data and technology securely and effectively. The ideal candidate will have deep expertise in Microsoft Entra ID (formerly Azure AD), Okta, and Ping Federate to design, implement, and manage Directory and Authentication solutions for our global workforce of 80,000 users and customer identities.

In this role, you'll be responsible for

• Designing and implementing federation identity and access management solutions aligned with business requirements.
• Integrating federation technologies with enterprise and cloud systems (e.g., Active Directory, HR systems, cloud applications) using standards such as SAML 2.0, OIDC, and OAuth 2.0.
• Developing and maintaining custom authentication experiences leveraging Okta APIs, SDKs, and widget-based login flows.
• Configuring and supporting various MFA technologies, such as PingID, Okta Verify, MS Authenticator, FIDO2, biometric, and OTP/push authentication.
• Troubleshooting and resolving federation authentication and authorization issues, including analyzing logs and diagnosing user provisioning challenges.
• Monitoring, optimizing, and ensuring the scalability and performance of federation infrastructure.
• Providing technical guidance and support to administrators and end-users on federation-related topics.
• Collaborating with cross-functional teams, vendors, and external partners to leverage integration opportunities and enhance federation capabilities.
• Documenting federation configurations, processes, and procedures; staying updated on industry trends and recommending improvements for ongoing enhancement.

Experiences that make you a strong candidate for this role

• Proven experience as a Federation Engineer or in a similar role, with a strong understanding of identity and access management principles, using Okta, Entra ID, and PingFederate.
• Hands-on experience with Okta Identity Engine (OIE) for CIAM workflows (registration flows, self-service, and B2C/B2B identity patterns, Sign-in Widget).
• Solid knowledge of federation platform features and functionalities, including user lifecycle management, SSO, and MFA.
• Strong troubleshooting and problem-solving skills, with the ability to analyze and resolve complex federation-related issues.
• Excellent communication and interpersonal skills, with the ability to collaborate effectively with cross-functional teams.
• Strong attention to detail and ability to prioritize tasks in a fast-paced environment.

Qualifications & Requirements

• Bachelor's degree with 5 years of experience OR Masters with 4 years of experience.
• Minimum 4 years of experience with Okta, Ping Federate.
• Advanced proficiency in PowerShell scripting for automation and management of identity systems.
• Excellent problem-solving skills and ability to work in a fast-paced, global environment.

Preferred

• Certifications in relevant federation technologies (such as Okta Certified Administrator, Ping Federate / PingOne Certified, or Microsoft Entra ID) are a plus.
• Experience supporting large-scale environments (10,000+ users; 80,000+ users preferred).
• Knowledge of security best practices and compliance frameworks (e.g., NIST, ISO 27001)..

Additional Information

Applicable only to applicants applying to a position in any location with pay disclosure requirements under state or local law:

• The compensation range described below is the range of possible base pay compensation that the Company believes in good faith it will pay for this role at the time of this posting based on the job grade for this position. Individual compensation paid within this range will depend on many factors including geographic location, and we may ultimately pay more or less than the posted range. This range may be modified in the future.
• We offer a comprehensive package of benefits including paid time off (vacation, holidays, sick), medical/dental/vision insurance and 401(k) to eligible employees.
• This job is eligible to participate in our short-term incentive programs.

Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, incentive, benefits, or any other form of compensation and benefits that are allocable to a particular employee remains in the Company's sole and absolute discretion unless and until paid and may be modified at the Company's sole and absolute discretion, consistent with applicable law.