Identity & Access Management Architect – Okta Migration

Job Title:Identity & Access Management Architect Okta Migration (Contract-to-Hire)
Location:Palo Alto CA (hybrid preferred; remote considered for exceptional candidates)
Type: Contract-to-Hire
Duration:6 months initial term with conversion to full-time employment possible based on performance
Travel: International travel will be required to Serbia
Engagement Details

• Start date: ASAP; interviews conducted on a rolling basis.
• Reports to: Senior Manager Enterprise Cybersecurity.
• Contract-to-hire: Strong performers will be considered for a full-time Identity Engineering role at the conclusion of the initial term.

• Lead technical architecture for the Entra ID to Okta workforce identity migration: federation design app integration sequencing cutover planning rollback strategy and hypercare.
• Design and build SSO/SAML/OIDC integrations across the enterprise application portfolio; architect multi-tenant deployment (separate US/EU tenants) to meet regional data requirements.
• Architect lifecycle management and provisioning workflows (HR-driven joiner/mover/leaver) including SCIM integrations.
• Define and implement MFA adaptive authentication and device assurance policies aligned to a zero-trust roadmap.
• Serve as technical counterpart to the implementation partner: review designs challenge assumptions hold delivery quality to standard.
• Maintain and operate the Okta environment post-cutover: policy tuning integration onboarding incident support and operational runbooks.
• Produce audit-ready documentation for an ISO 27001 / TISAX-aligned control environment.

• Contribute to the design and build of a custom identity orchestration layer (Databricks or equivalent): attribute-driven provisioning ABAC policy models JIT privileged access anomaly detection automated deprovisioning and audit/recertification capabilities.
• Support integration of identity and authorization event logs into the cybersecurity SIEM.

• 7 years in identity and access management with 3 years hands-on Okta experience building deploying and maintaining Okta Workforce Identity Cloud environments.
• At least one completed enterprise migration from Entra ID / Azure AD to Okta as architect or technical lead.
• Deep expertise in SAML OIDC OAuth 2.0 SCIM and directory integration (AD/Entra ID hybrid scenarios).
• Experience operating and administering Okta in production: policy management app integrations lifecycle workflows troubleshooting.
• Experience designing MFA and adaptive access policies at enterprise scale.
• Strong documentation skills; able to produce audit-ready artifacts.
• Proven ability to work alongside system integrators while retaining architectural ownership.

• Okta Certified Consultant or Okta Certified Architect.
• Experience building custom identity automation or governance tooling using Python/SQL event-driven pipelines and APIs.
• Working knowledge of data platforms (Databricks Spark or comparable) for event ingestion and processing.
• Experience with ABAC/policy-based authorization models and JIT/ephemeral privileged access patterns in AWS.
• SIEM integration experience (log normalization detection engineering for identity signals).
• Familiarity with IGA platforms PAM solutions and enterprise password managers.
• Experience in regulated or automotive environments (TISAX ISO 27001 NIST 800-53).