IT Systems Specialist (Okta Admin)

About Lyra Health

Lyra is transforming mental health care through technology with a human touch to help people feel emotionally healthy at work and at home. We work with industry leaders, such as Morgan Stanley, Uber, Amgen, and other Fortune 500 companies, to improve access to effective, high-quality mental health care for their employees and their families. With our innovative digital care platform and global provider network, nearly 20 million people can receive the best care and feel better, faster. Founded by David Ebersman, former CFO of Facebook and Genentech, Lyra has raised more than $900 million.

About the Role

As a member of the Enterprise Applications & Identity Management team, your role is pivotal in ensuring the redundancy, scalability, and security of our client infrastructure. You will be tasked with managing and supporting several of our core enterprise IT systems, with a primary focus on Okta. Your responsibilities will include overseeing Identity Provider (IDP), Single Sign-On (SSO), and System for Cross-domain Identity Management (SCIM) provisioning. Additionally, you will play a key role in advancing our automation strategy to streamline processes and enhance efficiency across our IT infrastructure. This position requires a strong understanding of enterprise-level identity management solutions and a proactive approach to identifying and implementing improvements in our systems and processes.

This role can be carried out from our Burlingame, CA headquarters, hybrid, or fully remote/virtually.

Remote candidates must be physically located within the United States.

• Troubleshoot, identify and resolve technical identity and access management-related issues within Okta
• Work with stakeholders to gather information needed for business application integration with Okta SAML, OpenID Connect and SCIM provisioning
• Contribute to planning and implementing IAM strategy ensuring optimal performance and security configurations
• Identify workflow improvements as it relates to access provisioning and lifecycle management
• Proactively seek opportunities to automate, streamline processes, and empower users
• Collaborate with multiple teams to manage the flow of user data between Okta and other internal directories like Workday and Google Workspace
• Advocate and coach employees on how to make the most of our IT systems
• Create and update documentation around proactive solutions to help end users
• Provide support for macOS, hardware, cloud-based apps, mobile devices, peripherals, video conferencing equipment  and network escalations
• Generate reports on user activity, access levels, and potential security risks within the Okta environment
• Diagnose and resolve issues related to user logins and application access
• Org2Org integration with multiple spoke environments
• Develop, implement, and maintain quarterly audits in Okta and all enterprise applications
• Experience with escalations to Okta CSM and Support Portal

• Okta Certified Administrator
• 4+ years experience in managing and maintaining identity management and synchronization solutions via Okta 
• 4+ years of internal and external enterprise applications and systems implementation and support (e.g. Workday or similar HRIS, Google Workspace, Slack Enterprise Grid, and service ticketing systems, etc.)
• Solid understanding of Okta group rules, security policies, push groups, custom expression language, and custom attributes
• Experience with Okta and Workday lifecycle management integration
• Ability to drive concurrent, complex projects and initiatives while managing operational escalations
• Communicate concisely, persuasively, and consistently. Can adjust and adapt communication style as appropriate to different audiences, including senior management
• Experience with troubleshooting and integrating solutions in a Mac-based environment 
• Demonstrated ability to work independently with minimal supervision, maintaining a self-driven approach while effectively pivoting to address escalations and ad hoc high-priority requests in a fast-paced environment

Protect yourself from recruitment fraud

Lyra Health does not use text or chat applications to conduct interviews or make job offers. We have a thoughtful and interactive interview process that primarily includes video-based interviews with our hiring teams. Communications will always be conducted from lyrahealth(dot)com or lyraclinical(dot)com domain names. Please disregard any other communications that do not include these domain names but appear to be from Lyra Recruiting.

"We are an Equal Opportunity Employer. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, age, disability, genetic information or any other category protected by law.

By applying for this position, you acknowledge that your personal information will be processed as per the Lyra Health Workforce Privacy Notice. Through this application, to the extent permitted by law, we will collect personal information from you including, but not limited to, your name, email address, gender identity, employment information, and phone number for the purposes of recruiting and assessing suitability, aptitude, skills, qualifications, and interests for employment with Lyra.  We may also collect information about your race, ethnicity, and sexual orientation, which is considered sensitive personal information under the California Privacy Rights Act (CPRA) and special category data under the UK and EU GDPR.  Providing this information is optional and completely voluntary, and if you provide it you consent to Lyra processing it for the purposes as described at the point of collection, for example for diversity and inclusion initiatives.  If you are a California resident and would like to limit how we use this information, please use the Limit the Use of My Sensitive Personal Information form.  This information will only be retained for as long as needed to fulfill the purposes for which it was collected, as described above. Please note that Lyra does not “sell” or “share” personal information as defined by the CPRA. Outside of the United States, for example in the EU, Switzerland and the UK, you may have the right to request access to, or a copy of, your personal information, including in a portable format; request that we delete your information from our systems; object to or restrict processing of your information; or correct inaccurate or outdated personal information in our systems. These rights may be subject to legal limitations. To exercise your data privacy rights outside of the United States, please contact globaldpo@lyrahealth.com. For more information about how we use and retain your information, please see our Workforce Privacy Notice."