IT Security Engineer V - 100% Remote

Genesis10 is currently seeking a Security Engineer - Identity & Access Management (IAM) position with a Leading Pharmacy Benefit Manager located in MN. This is a 7+ month contract opportunity.100% RemotePay range: $66.37 - $68.42 per hourThe Security Engineer is responsible for designing, implementing, and operating identity and access security controls that protect the client's information systems from unauthorized access, misuse, alteration, or disclosure. This role focuses on workforce and customer identity platforms, ensuring secure authentication, authorization, and integration across cloud applications and services. The engineer plans, coordinates, and executes security measures within Microsoft Azure Entra and Okta environments, partnering closely with application teams, infrastructure, security, and business stakeholders to enable secure access while maintaining system availability, compliance, and a strong security posture.ResponsibilitiesDesign, implement, and manage Conditional Access policies to enforce MFA, device posture, network location, and risk-based access controls for workforce and guest usersAdminister application registrations and enterprise applications, including permissions consent, secrets and certificate management, and lifecycle governanceConfigure and support Single Sign On (SSO) using Entra ID as an Identity Provider (IdP) for applications leveraging OIDC, OAuth 2.0, and SAMLSecure and manage Azure API access, including OAuth scopes, app roles, managed identities, and service principalsPerform advanced Azure Entra troubleshooting, including authentication failures, token issuance issues, conditional access evaluations, and sign-in diagnosticsSupport identity related incidents, access escalations, and production issues with a focus on root cause analysis and preventionAdminister Okta Customer Identity environments supporting client, member, and pharmacy facing applicationsConfigure SSO as both an Identity Provider (IdP) and Service Provider (SP) using OIDC, OAuth 2.0, and SAML for internal and external integrationsManage customer-managed IDPs federated into Okta, including configuration, troubleshooting, and security reviewOversee application onboarding and registration in Okta, including claims, scopes, token lifetimes, and signing credentialsDesign and enforce Okta API security, including OAuth authorization servers, access policies, and rate limitingMaintain Okta tenant security posture, including policy administration, MFA enforcement, session policies, and baseline security controlsCollaborate with application teams to design secure authentication and authorization patterns for new and existing systemsSupport IAM lifecycle processes, including access reviews, role changes, and decommissioningContribute to identity-related security standards, architecture documentation, and operational runbooksParticipate in security incident response activities related to identity compromise or access control failuresSupport audits, compliance assessments, and security reviews by providing evidence and technical explanationsServe as backup or secondary support across IAM platforms to ensure continuity and operational resilienceRequirementsProven expertise in designing, implementing, and operating identity and access security controlsExperience with Microsoft Azure Entra and Okta environmentsKnowledge of OIDC, OAuth 2.0, and SAML protocolsExperience with Conditional Access policies, SSO, and API securityAbility to collaborate with application teams, infrastructure, security, and business stakeholdersFor contract roles, Genesis10 offers the benefits listed below. If this is a perm-placement opportunity, our recruiter can talk you through the unique benefits offered for that particular client.Benefits of Working with Genesis10Access to hundreds of clients, most who have been working with Genesis10 for 5-20+ years.The opportunity to have a career-home in Genesis10; many of our consultants have been working exclusively with Genesis10 for years.Access to an experienced, caring recruiting team (more than 7 years of experience, on average.)Behavioral Health PlatformMedical, Dental, VisionHealth Savings AccountVoluntary Hospital Indemnity (Critical Illness & Accident)Voluntary Term Life Insurance401KSick Pay (for applicable states/municipalities)Commuter Benefits (Dallas, NYC, SF, and Illinois)Genesis10 is an Equal Opportunity Employer. Candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.If you have the described qualifications and are interested in this exciting opportunity, please apply!J-18808-Ljbffr