IAM Engineer - Okta App Migration Consultant - Senior - EY Global Delivery Services

EY; Buenos Aires; Presencial; ARS 83.045.000 - 135.892.000; Jornada completa

Descripción de la vacante

EY is seeking an IAM Engineer – Okta App Migration Consultant in Argentina. The role requires 2–3 years of relevant experience, leading Okta onboarding, authentication design, and secure federation for enterprise apps.

You will drive migration activities across multiple stakeholders, coordinating testing, cutover readiness, and producing high-quality delivery docs. The candidate should demonstrate hands-on Okta experience, strong client-facing communication, and ability to guide complex

Formación

• Hands-on IAM with strong delivery experience in Okta onboarding and migration.
• Experience configuring SSO integrations using SAML 2.0, OIDC, and OAuth 2.0.
• Experience with MFA, sign-on policies, and access workflows.

Responsabilidades

• Lead Okta migration and onboarding activities for enterprise apps.
• Conduct discovery sessions with stakeholders to map authentication methods and migration constraints.
• Configure and support SSO integrations (SAML 2.0, OIDC, OAuth 2.0).
• Implement and validate sign-on policies, MFA, and user/group mappings.
• Coordinate migration planning, testing, cutover readiness, and post-go-live support.
• Produce technical documentation and runbooks; mentor junior consultants.

Conocimientos

IAM expertise

Okta onboarding

SAML/OIDC/OAuth

MFA implementation

AD integrations

Testing & migration

Documentation

Stakeholder management

Communication

Herramientas

Terraform

GitHub

Jenkins

CI/CD tooling

Okta Workflows

Descripción del empleo

Job Title: IAM Engineer – Okta App Migration Consultant Location: Argentina Experience: at least 2 or 3 years of relevant experience

Role Summary

The Senior Okta App Migration Consultant will support the US client account within EY’s Cybersecurity / Identity & Access Management practice. This role is responsible for leading application migration and onboarding activities into Okta, supporting secure authentication and federation capabilities, coordinating testing and cutover readiness, and producing high-quality delivery documentation. The role requires strong hands‑on Okta experience, client-facing communication skills, and the ability to drive migration activities across multiple stakeholders and environments.

Core Responsibilities

• Lead application migration and onboarding activities into Okta, including requirement gathering, design validation, implementation, testing, and production support.
• Conduct discovery sessions with business and technical stakeholders to understand authentication methods, access requirements, dependencies, and migration constraints.
• Configure and support SSO integrations using SAML 2.0, OIDC, and OAuth 2.0 for enterprise applications.
• Implement and validate Okta sign‑on policies, MFA requirements, user/group mappings, and access flows aligned with client expectations.
• Support migration planning, test execution, cutover readiness, defect resolution, and post‑go‑live stabilization / hypercare.
• Coordinate with application owners, infrastructure teams, security teams, and delivery leadership to ensure smooth and timely execution.
• Troubleshoot complex authentication, federation, provisioning, and policy‑related issues during onboarding and migration.
• Prepare and maintain technical documentation including requirement documents, design documents, runbooks, KT materials, and status updates.
• Support knowledge transfer to operations teams and mentor junior consultants where needed.

Required Skills

• Hands‑on experience in IAM with strong delivery experience in Okta application onboarding and migration.
• Strong knowledge of Okta SSO integrations and authentication standards including SAML 2.0, OIDC, and OAuth 2.0.
• Experience with MFA implementation, sign‑on policies, access policies, and secure authentication design.
• Working knowledge of Active Directory integrations, delegated authentication, and identity lifecycle considerations.
• Experience supporting testing, defect remediation, cutover, and production stabilization for IAM / SSO migrations.
• Strong troubleshooting, analytical, communication, and stakeholder management skills.
  • Ability to create high‑quality technical and operational documentation.

Good to Have

• Experience with Okta Org2Org, tenant migration, routing rules, or large‑scale identity transformation programs.
• Experience with Okta APIs, Okta Workflows, or automation for onboarding and migration activities.
• Exposure to Terraform, GitHub, Jenkins, or related CI/CD tooling.
• Familiarity with Microsoft Entra ID, PingFederate, CyberArk, or SailPoint in hybrid IAM environments.
• Prior experience in banking, financial services, or regulated environments.
• Okta certifications such as Okta Certified Professional or Okta Certified Administrator.

Additional Expectations

• Ability to work independently and collaborate effectively across distributed EY and client teams.
• Strong ownership mindset with focus on quality, accountability, and delivery discipline.
• Comfortable working in client‑facing roles, leading discussions, and providing concise status updates.
• Support mentoring, knowledge sharing, and operational handoff activities as part of the EY delivery model.