Identity Architecture & Okta Administration
•
Own Northwood’s Okta environment end-to-end, including tenant configuration, application integrations, lifecycle management, MFA policy enforcement, and directory synchronization.
•
Design and maintain Northwood’s SSO architecture, ensuring all corporate and government-facing applications are integrated into a consistent, auditable authentication framework.
•
Develop and enforce adaptive authentication policies, step-up MFA configurations, and risk-based access controls aligned to the sensitivity of the systems being accessed.
•
Manage Okta workflows and automation to support user provisioning, deprovisioning, and access change processes across the employee and contractor lifecycle.
•
Maintain Okta system health, audit logging, and integration reliability, ensuring identity telemetry flows into Northwood’s SIEM for continuous monitoring.
•
Design and implement role-based access control frameworks across Northwood’s corporate systems, cloud environments, and government workloads, ensuring access is granted on a least-privilege and need-to-know basis.
•
Define and maintain role taxonomies, access request workflows, and entitlement review processes that satisfy CMMC, FedRAMP, and NIST 800-171 access control requirements.
•
Conduct periodic access reviews and certification campaigns, working with system owners to validate that entitlements remain appropriate and revoke unnecessary access.
•
Develop and maintain access control documentation, including role definitions, provisioning procedures, and audit evidence required for compliance assessments.
•
Enforce segregation of duties controls across critical systems, identifying and remediating access conflicts that create compliance or operational risk.
MDM Management & Provisioning
· Architect, deploy, and manage a unified Mobile Device Management (MDM) solution across macOS, Windows, Linux, and iOS/Android endpoints, ensuring consistent security baselines and configuration compliance across all device types.
· Establish and maintain OS-level hardening benchmarks (CIS, DISA STIG) across macOS, Windows, and Linux endpoints, translating requirements into enforced MDM policies and automated remediation workflows
· Define and enforce MDM configuration profiles, compliance policies, and conditional access rules across all managed platforms in alignment with CMMC, NIST 800-53, and organizational security standards
SSO & Application Integration
•
Lead SSO onboarding for new SaaS applications, internal tools, and government-facing platforms, ensuring integrations conform to Northwood’s authentication standards and security policies.
•
Evaluate and enforce SAML, OIDC, and OAuth 2.0 implementation standards across integrated applications, identifying and remediating misconfigurations that introduce identity risk.
•
Partner with the Security Engineering Lead to ensure Okta log ingestion, anomaly detection, and identity-based alerting are functioning and continuously tuned within the SIEM environment.
•
Support integration of identity controls with endpoint management platforms, ensuring device trust policies are enforced as part of access decisions.
Privileged Access & Secrets Management
•
Design and maintain privileged access management controls for administrative accounts, service accounts, and break-glass access procedures across corporate and government environments.
•
Define and enforce service account governance standards, including credential rotation policies, least-privilege scoping, and audit logging requirements.
•
Collaborate with the Product Security Lead on secrets management integration with identity controls, ensuring service-to-service authentication conforms to zero-trust principles.
Compliance & Cross-Functional Collaboration
•
Ensure Northwood’s IAM environment satisfies access control requirements across CMMC Level 2, FedRAMP, SOC 2, and ITAR, providing audit evidence and control documentation to the GRC Lead as needed.
•
Partner with the GRC Lead to support access control–related audit activities, including evidence collection, assessor walkthroughs, and remediation of identified deficiencies.
•
Collaborate with the network engineering team to ensure identity-aware network access controls and Zero Trust policies are consistently enforced across Cloudflare and on-premises environments.
•
Develop and maintain IAM architecture documentation, including data flow diagrams, integration maps, and access control matrices that reflect Northwood’s current environment.