IAM solution architect

Role Overview

The Solutions Architect Okta Identity & Access Management will be responsible for leading the end-to-end solution architecture, design, and technical governance for the Okta Customer Identity Solutions (CIS) implementation. This role will work closely with business stakeholders, security teams, application owners, and engineering teams to define the identity strategy, design scalable IAM solutions, and oversee the implementation of Okta Identity Cloud, Identity Governance, Workflows, and enterprise application integrations. The Solutions Architect will provide technical leadership throughout the discovery, design, implementation, and deployment phases while ensuring alignment with enterprise security and architecture standards.

Key Responsibilities

• Lead discovery workshops to gather business, security, and technical requirements for the Okta CIS implementation.
• Design the overall Okta Customer Identity architecture, including Universal Directory, Identity Governance, Workflows, and enterprise application integrations.
• Define the identity lifecycle (Joiner, Mover, Leaver) and user onboarding strategy for manual, CSV, and future HR-driven provisioning.
• Design Identity Governance capabilities including Access Requests, Access Certifications, Resource Catalogs, approval workflows, and governance policies.
• Define authentication, authorization, Single Sign-On (SSO), Multi-Factor Authentication (MFA), and session management strategies.
• Design federation architecture, including Org2Org integrations, SAML/OIDC trust relationships, and attribute mappings.
• Collaborate with application owners to define application onboarding, access models, and SSO integration requirements.
• Develop solution design documents, architecture diagrams, technical standards, and implementation roadmaps.
• Provide technical leadership and guidance to the engineering team during implementation and deployment.
• Review and approve solution designs, workflows, custom connectors, and integrations developed by the engineering team.
• Define deployment, environment management, and promotion strategies for Preview and Production tenants.
• Ensure alignment with enterprise security standards, governance policies, and IAM best practices.
• Support project planning, effort estimation, technical risk assessment, and stakeholder communication throughout the project lifecycle.

Required Skills & Experience

• Strong expertise in Okta Identity Cloud, Okta Identity Governance (OIG), and Okta Workflows.
• Extensive experience designing enterprise Identity & Access Management (IAM) solutions.
• Strong knowledge of Universal Directory, Profile Editor, Group Rules, Authentication Policies, and Lifecycle Management.
• Experience designing Identity Governance solutions, including Access Requests, Access Certifications, Entitlement Management, and approval workflows.
• Strong understanding of SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), SCIM, and federation concepts.
• Experience designing Org2Org federation and enterprise SSO architectures.
• Knowledge of Infrastructure as Code (Terraform) and CI/CD deployment practices for Okta is preferred.
• Strong understanding of enterprise security principles, Zero Trust architecture, RBAC, SoD, and identity governance best practices.
• Experience integrating external HR systems and enterprise applications with Okta.
• Excellent stakeholder management, solution design, documentation, and technical leadership skills.