IAM Solutions Architect - Okta

NEXWARE; Bengaluru; On-site; INR 3,500,000 - 6,000,000; Full time

Job summary

NEXWARE seeks an experienced IAM architect to design and implement enterprise Okta-based identity solutions in Bengaluru. You will lead workshops, define lifecycle strategies, and govern access across applications with robust SSO, MFA, and federation capabilities.

You will collaborate with product owners and engineering teams to deliver scalable identity architectures, integration patterns, and security controls aligned with Zero Trust principles.

Qualifications

• Extensive experience designing enterprise IAM solutions (Okta a must).
• Strong expertise in Okta Identity Cloud, OIG, and Workflows.
• Knowledge of SAML 2.0, OAuth 2.0, OIDC, SCIM, and federation concepts.
• Experience with Org2Org federation and enterprise SSO architectures.
• Ability to design and govern IAM with RBAC, SoD, and Zero Trust principles.

Responsibilities

• Lead discovery workshops to gather requirements for Okta CIS implementation.
• Design overall Okta identity architecture including Universal Directory, Governance, Workflows, and app integrations.
• Define identity lifecycle and onboarding strategy for provisioning.
• Design Identity Governance capabilities including access requests, access certifications, and entitlement management.
• Define authentication, authorization, SSO, MFA, and session management strategies.
• Design federation architecture including Org2Org, SAML/OIDC trusts, and attribute mappings.
• Collaborate with application owners on onboarding and access models and SSO requirements.
• Develop solution design documents, architecture diagrams, technical standards, and roadmaps.
• Provide technical leadership during implementation and deployment.
• Review solution designs and integrations for quality and security alignment.
• Define deployment environments and promotion strategies for Preview and Production.
• Ensure alignment with security standards and IAM best practices.
• Support project planning, risk assessment, and stakeholder communication throughout the project lifecycle.

Skills

Okta Identity Cloud

Okta Identity Governance

Okta Workflows

IAM Architecture

Universal Directory

SAML 2.0

OIDC

OAuth 2.0

Org2Org federation

Terraform

CI/CD for Okta

Zero Trust

RBAC & SoD

HR system integration

Education

Bachelor's degree in a relevant field

Job description

Key Responsibilities

• Lead discovery workshops to gather business, security, and technical requirements for the Okta CIS implementation.
• Design the overall Okta Customer Identity architecture, including Universal Directory, Identity Governance, Workflows, and enterprise application integrations.
• Define the identity lifecycle (Joiner, Mover, Leaver) and user onboarding strategy for manual, CSV, and future HR-driven provisioning.
• Design Identity Governance capabilities including Access Requests, Access Certifications, Resource Catalogs, approval workflows, and governance policies.
• Define authentication, authorization, Single Sign-On (SSO), Multi-Factor Authentication (MFA), and session management strategies.
• Design federation architecture, including Org2Org integrations, SAML/OIDC trust relationships, and attribute mappings.
• Collaborate with application owners to define application onboarding, access models, and SSO integration requirements.
• Develop solution design documents, architecture diagrams, technical standards, and implementation roadmaps.
• Provide technical leadership and guidance to the engineering team during implementation and deployment.
• Review and approve solution designs, workflows, custom connectors, and integrations developed by the engineering team.
• Define deployment, environment management, and promotion strategies for Preview and Production tenants.
• Ensure alignment with enterprise security standards, governance policies, and IAM best practices.
• Support project planning, effort estimation, technical risk assessment, and stakeholder communication throughout the project lifecycle.

Required Skills & Experience

• Strong expertise in Okta Identity Cloud, Okta Identity Governance (OIG), and Okta Workflows.
• Extensive experience designing enterprise Identity & Access Management (IAM) solutions.
• Strong knowledge of Universal Directory, Profile Editor, Group Rules, Authentication Policies, and Lifecycle Management.
• Experience designing Identity Governance solutions, including Access Requests, Access Certifications, Entitlement Management, and approval workflows.
• Strong understanding of SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), SCIM, and federation concepts.
• Experience designing Org2Org federation and enterprise SSO architectures.
• Knowledge of Infrastructure as Code (Terraform) and CI/CD deployment practices for Okta is preferred.
• Strong understanding of enterprise security principles, Zero Trust architecture, RBAC, SoD, and identity governance best practices.
• Experience integrating external HR systems and enterprise applications with Okta.
• Excellent stakeholder management, solution design, documentation, and technical leadership skills.