Okta IAM Architect

Position Summary

We are seeking a seasoned Principal IAM Okta Architect with 15+ years of total IT/Security experience to lead the vision, design, and strategic execution of our Global Identity & Access Management (IAM) landscape. In this enterprise leadership role, you will define the identity strategy, establish Zero Trust security blueprints, and architect end-to-end Okta solutions to safeguard our workforce and customer ecosystems across complex multi-cloud environments.

Key Responsibilities

• Enterprise Architecture & Strategy: Lead the long-term strategic vision and architecture for IAM across the enterprise, defining standards for Single Sign-On (SSO), Adaptive MFA, Universal Directory, and Zero Trust identity frameworks.
• Complex Multi-Tenant Integrations: Design and govern Okta Workforce Identity Cloud (WIC) and Customer Identity Cloud (CIC / Auth0) integrations across multi-cloud ecosystems (AWS, Azure, Google Cloud Platform) and hybrid on-premises legacy environments.
• Identity Governance & Lifecycle: Oversee end-to-end User Lifecycle Management (Automated Provisioning/Deprovisioning) and implement advanced governance controls using Okta Identity Governance (OIG) and Okta Workflows.
• Directory & Legacy Modernization: Lead complex directory migration and consolidation strategies involving Active Directory, Entra ID (Azure AD), LDAP, and legacy federation services (ADFS, Ping, SiteMinder).
• Security & Compliance Governance: Align identity controls with enterprise risk frameworks (ISO 27001, SOC2, NIST 800-63, HIPAA, SOX) and partner with CISO leadership to enforce least-privilege models.
• Technical Leadership & Advisory: Serve as the ultimate Subject Matter Expert (SME) on identity, chairing architectural review boards, mentoring senior engineers, and driving technology roadmaps with executive stakeholders.

Key Qualifications

• Experience: 15+ years in Information Security / Enterprise Architecture, with 8+ years dedicated to designing and architecting enterprise-scale Okta identity solutions.
• Certifications: Okta Certified Architect (Required); CISSP, CISM, or TOGAF (Highly Preferred).
• Technical Mastery: Deep expertise in SAML 2.0, OpenID Connect (OIDC), OAuth 2.0, SCIM 2.0, WS-Fed, Kerberos, and RADIUS protocols.
• Directory & Federation: Extensive experience managing enterprise-grade Active Directory, Entra ID, OpenLDAP, and cross-forest/multi-tenant architectures.
• Automation & Scripting: Strong capability with REST APIs, Postman, and custom integration development using Python, PowerShell, JavaScript, or Go.
• PAM & IGA Integrations: Hands-on experience integrating Okta with Privileged Access Management (PAM) tools (CyberArk, BeyondTrust) and IGA platforms (SailPoint, Saviynt).