Applications Architect IAM

Key Responsibilities

Design end-to-end IAM solutions and reference architectures using Okta Workforce Identity Cloud and/or Customer Identity Cloud/Auth0.

Define authentication, authorization, and identity governance frameworks.

Create high-level and low-level architecture designs, architecture diagrams, and integration blueprints.

Establish enterprise standards for:

Single Sign-On (SSO)
Multi-Factor Authentication (MFA)
Identity lifecycle management
Define and implement Zero Trust and adaptive/risk-based authentication policies.
 

Design MFA strategies using technologies such as:

Okta FastPass
WebAuthn/FIDO2
Passwordless authentication
Establish RBAC and ABAC models based on least-privilege principles.
 

Implement Identity Governance and Administration (IGA) capabilities, including:

Access certifications
Access requests
Separation of duties
Ensure IAM solutions align with applicable security and compliance frameworks, including SOC 2, ISO 27001, GDPR, HIPAA, and NIST.
Align IAM strategy with business objectives and enterprise architecture.
Develop IAM roadmaps and drive platform adoption.
Advise leadership on identity strategy, IAM tooling, and technology investments.
Collaborate with security, infrastructure, application, and compliance teams to deliver enterprise IAM solutions.
 

Required Knowledge, Skills & Abilities

15+ years of IT experience, including at least 5 years of experience in IAM architecture and design.
Deep expertise in Okta and Microsoft Entra ID (Azure AD), including advanced configurations and integrations.
Strong understanding of identity and federation protocols:
SAML
OAuth 2.0
OIDC
Federation concepts
Hands-on experience with:

MFA
SSO
Passwordless authentication
Conditional Access policies
 

Strong knowledge of:

Identity lifecycle management
RBAC
ABAC
Privileged Access Management (PAM)
Familiarity with IAM compliance frameworks and audit practices, including HIPAA, NIST, and SOC 2.
Hands-on experience with Identity Governance and Administration (IGA) tools and automation.
Experience integrating IAM solutions with AWS, Azure, and enterprise applications.
 

Relevant certifications are preferred, such as:

Okta Certified Consultant
Microsoft Certified: Identity and Access Administrator Associate
Equivalent IAM/identity certifications
Excellent problem-solving, communication, stakeholder engagement, and collaboration skills