Identity & Access Expert (Workflows)
Engie · Bucharest
This is a hybrid position - 3 days in the office and two work-from-home. Our Office is in Bucharest.
One of the world's leading energy companies, ENGIE is present across the entire energy chain, in electricity and natural gas, from upstream to downstream. By placing responsible growth at the heart of its businesses (energy, energy services and the environment), its mission is to meet major challenges: meeting energy needs, ensuring security of supply, combating climate change, and optimising the use of resources.
GBS is part of ENGIE, partnering with the support functions for the ENGIE's Business Units and Corporate. It currently has 7 Business Support functions: purchasing, consulting, finance, real estate and logistics, legal, human Resources, information systems. By 2025, GBS is ENGIE's "transition maker" for support function excellence. Amplifying ENGIE's net zero mission, we provide a competitive edge through efficient operations, strategic resource allocation, and pioneering in culture and technology.
What we are looking for:
We are seeking a highly skilled and proactive OKTA Expert to join our Identity & Access Engineering team.
This position is part of a global organisation operating in a distributed model, supporting identity services across multiple regions and business entities.
As an OKTA Expert, your primary role will be to design, implement, and maintain OKTA-based identity solutions, with a strong focus on automation through OKTA Workflows and the optimisation of Access Request processes. You will contribute to ensuring secure, scalable, and efficient identity operations supporting critical business applications.
Responsibilites:
- Identity Solution Engineering: Design, implement, and maintain OKTA identity solutions, including Single Sign-On (SSO), Multi-Factor Authentication (MFA), lifecycle management, and access policies, ensuring high availability and performance.
- OKTA Workflows Development: Develop, enhance, and maintain complex OKTA Workflows to automate identity processes such as user provisioning, deprovisioning, joiner/mover/leaver processes, and approval workflows. Ensure robustness, scalability, and maintainability of automation.
- Access Request & Governance: Design and optimise access request processes, including approval chains, entitlement models, and governance rules. Ensure alignment with IAM best practices and compliance requirements.
- Incident & Problem Support (L3 Expertise): Provide expert-level troubleshooting and resolution for complex incidents related to OKTA and identity services. Support escalation from L2 teams by analysing root causes and implementing long-term fixes.
- Integration & Automation: Integrate OKTA with internal and external applications using APIs, connectors, and workflows. Contribute to automation initiatives aimed at reducing manual operations.
- Security & Compliance: Ensure all identity solutions comply with security standards, audit requirements, and company policies. Contribute to identity governance and risk mitigation initiatives.
- Collaboration: Work closely with application teams, cybersecurity teams, and other IAM stakeholders to understand requirements and deliver appropriate solutions.
- Documentation: Maintain accurate documentation of configurations, workflows, processes, and best practices. Contribute to the knowledge base and ensure proper knowledge transfer.
- Continuous Improvement: Actively participate in improving identity processes, tools, and automation capabilities to enhance efficiency and service quality.
- Agile Methodology: Work within an agile framework (e.g. Kanban), managing and prioritising workload while participating in regular team ceremonies.
Requirements:
Soft Skills
- Communication: Excellent verbal and written communication skills in English. Ability to convey technical information to non-technical stakeholders clearly and concisely.
- Teamwork: Strong ability to work collaboratively in a diverse, international team. Adaptable to different working styles and cultures.
- ProblemSolving: High analytical and problem-solving abilities. Capability to think critically and troubleshoot issues effectively under pressure.
- Customer Focus: Strong customer service orientation. Commitment to understanding and meeting the needs of internal clients.
- Time Management: Efficient time management and multitasking skills. Ability to prioritize tasks and manage workload effectively in a fast-paced environment.
- Adaptability: Flexible and able to adapt to changing circumstances and requirements. Eager to learn and stay updated with new technologies and processes.
Technical Skills (Preferred)
- OKTA Core: Advanced expertise (SSO, MFA, Lifecycle Management, policy configuration)
- OKTA Workflows: Advanced hands-on experience in workflow design and automation.
- Access Request / IAM Governance: Strong experience in access management processes
- API integration (REST, JSON)
- Strong understanding of IAM concepts (RBAC, least privilege, identity lifecycle)
Qualifications
- Bachelor’s degree in information technology, Computer Science, Cybersecurity, or a related field, or equivalent work experience
- Proven experience in Identity & Access Management, preferably in a large international environment
- Professional proficiency in English (written and spoken) is mandatory
- Strong hands-on experience with OKTA platform and related technologies
- Experience working in engineering or advanced support (L3) roles
- Certifications in relevant technologies (OKTA, IAM, security) are a strong plus
- Experience with automation and workflow tools in IAM context is highly desirable
Benefits:
- Private health insurance for you and your family;
- Opportunities for ongoing personal and professional development;
- Meal tickets;
- Work-life balance;
- Annual extended holiday entitlement, depending on the length of employment.
Only candidates selected for interviews will be contacted.
ENGIE is an Equal Opportunity Employer. Our commitment is unwavering: we do not discriminate based on race, color, age, sex, religion or religious creed, national origin, marital status, gender expression, genetic information, sexual orientation, ancestry, mental or physical disability, military or veteran status, or any other characteristic protected by law.