Identity Security Analyst

Parsons is hiring a Consultant, Identity Security Analyst for a hybrid role in California. The contract runs September 2026 to June 2027 with onsite coverage Tuesdays, Wednesdays, and Thursdays and remote work Mondays and Fridays. This position supports enterprise infrastructure and security platforms through administration, operational oversight, maintenance, and ongoing support.

Compensation for this role is USD 88,400 to 154,700 per year.

Benefits and work support

• Medical, dental, and vision
• Paid time off, plus paid flexible holidays and holidays
• Flexible work schedules
• 401(k) and Employee Stock Ownership Plan (ESOP)
• Life insurance
• Employee assistance program
• Paid active-duty military leave

Key responsibilities

• Provide technical administration and operational support for enterprise backup and recovery platforms, Okta identity and access management services, Zscaler internet access and private access services, and Infoblox DNS, DHCP, and IPAM services, including related integrations, reporting, documentation, and day-to-day support.
• Administer backup policies, schedules, retention rules, and backup plans, including monitoring daily job status, failures, warnings, and success rates.
• Troubleshoot failed or incomplete backup jobs and perform file-level, server-level, and application-level recovery as required.
• Support backup configuration for virtual machines, physical servers, databases, file shares, and cloud workloads, and validate backup coverage for critical systems.
• Assist with disaster recovery readiness and recovery testing, while generating compliance, capacity, and operational reports.
• Maintain documentation for backup procedures, configurations, and escalation steps, and coordinate with application, server, storage, and security teams for backup-related issues.
• Administer Okta users, groups, applications, policies, and integrations, including single sign-on, multi-factor authentication, lifecycle management, and provisioning configurations.
• Troubleshoot authentication, MFA, SSO, provisioning, and directory synchronization issues by reviewing Okta system logs for access issues, failed logins, policy denials, and user activity.
• Support integrations with Active Directory, Microsoft 365, and SaaS applications and help with Okta policy updates and device trust controls.
• Support access reviews, user deactivation, account lifecycle events, and group membership validation, and assist with security and audit requests related to identity access activity.
• Administer Zscaler policies, application segments, forwarding rules, access controls, and user/group assignments; troubleshoot ZIA/ZPA access issues involving PAC files, tunnels, and connectors.
• Review logs and analytics to investigate blocked traffic, denied access, application access failures, and policy enforcement, and support SSL inspection policies, URL filtering, cloud firewall rules, and security exceptions.
• Maintain and update PAC files or forwarding profiles, support Zscaler Client Connector deployments and upgrades, and monitor connector status and service health.
• Administer Infoblox DNS, DHCP, IPAM, Grid, including creating/modifying DNS records and DHCP scopes, troubleshooting resolution and service availability, and supporting upgrades and hotfixes.
• Manage role-based access controls for DNS/DHCP/IPAM administration, review audit logs and administrative activity as required, and assist with cloud-hosted Infoblox appliances where applicable.
• Produce weekly or monthly operational status reports and recurring platform reporting (backup job health and compliance, Okta access and policy review, Zscaler access/policy summaries, and Infoblox change and health reports).

Required qualifications

• At least 8+ years of experience.
• Bachelor’s degree in Computer Science or Engineering is desired (not required).

Technologies you will work with

• Okta
• Zscaler (ZIA, ZPA)
• Infoblox
• Enterprise backup and recovery platforms
• Active Directory, Microsoft 365
• DNS, DHCP, IPAM
• Azure, AWS
• PAC files, tunnels, app connectors, cloud connectors
• SSL inspection policies, URL filtering

Security clearance requirement: None.

Duration: September 2026 – June 2027.