IAM Solutions Architect Okta

Sonata Software; Bengaluru; Hybrid; INR 3,500,000 - 5,500,000; Full time

Job summary

Sonata Software is seeking a Solutions Architect for Okta Identity & Access Management to lead end-to-end architecture, governance, and implementation across the Okta CIS stack. You will collaborate with security, business, and engineering teams to deliver scalable IAM solutions and enterprise integrations.

You will define lifecycle management, governance policies, and SSO/MFA strategies, while guiding the design of federation and HR-driven provisioning processes.

Qualifications

• Strong expertise in Okta Identity Cloud, OIG, and Workflows.
• Experience designing enterprise IAM solutions, including SSO/MFA.

Responsibilities

• Lead end-to-end solution architecture and governance for Okta CIS implementations.
• Design the Okta Identity architecture including Universal Directory and Workflows.
• Define authentication, authorization, SSO, MFA, and session management strategies.
• Collaborate with stakeholders to gather requirements and define onboarding processes.
• Develop design documents, diagrams, and implementation roadmaps.
• Review designs and ensure alignment with security standards.

Skills

Okta Identity Cloud

Identity Governance (OIG)

Okta Workflows

IAM design

SAML/OIDC/OAuth

Org2Org federation

SSO architectures

Terraform

Zero Trust security

RBAC / SoD

Tools

Terraform

CI/CD tooling

Job description

TheSolutions Architect Okta Identity & Access Management will be responsible for leading the end-to-end solution architecture, design, and technical governance for the Okta Customer Identity Solutions (CIS) implementation. This role will work closely with business stakeholders, security teams, application owners, and engineering teams to define the identity strategy, design scalable IAM solutions, and oversee the implementation of Okta Identity Cloud, Identity Governance, Workflows, and enterprise application integrations. The Solutions Architect will provide technical leadership throughout the discovery, design, implementation, and deployment phases while ensuring alignment with enterprise security and architecture standards.

Key Responsibilities

• Lead discovery workshops to gather business, security, and technical requirements for the Okta CIS implementation.
• Design the overall Okta Customer Identity architecture, including Universal Directory, Identity Governance, Workflows, and enterprise application integrations.
• Define the identity lifecycle (Joiner, Mover, Leaver) and user onboarding strategy for manual, CSV, and future HR-driven provisioning.
• Design Identity Governance capabilities including Access Requests, Access Certifications, Resource Catalogs, approval workflows, and governance policies.
• Define authentication, authorization, Single Sign-On (SSO), Multi-Factor Authentication (MFA), and session management strategies.
• Design federation architecture, including Org2Org integrations, SAML/OIDC trust relationships, and attribute mappings.
• Collaborate with application owners to define application onboarding, access models, and SSO integration requirements.
• Develop solution design documents, architecture diagrams, technical standards, and implementation roadmaps.
• Provide technical leadership and guidance to the engineering team during implementation and deployment.
• Review and approve solution designs, workflows, custom connectors, and integrations developed by the engineering team.
• Define deployment, environment management, and promotion strategies for Preview and Production tenants.
• Ensure alignment with enterprise security standards, governance policies, and IAM best practices.
• Support project planning, effort estimation, technical risk assessment, and stakeholder communication throughout the project lifecycle.

Required Skills & Experience

• Strong expertise in Okta Identity Cloud, Okta Identity Governance (OIG), and Okta Workflows.
• Extensive experience designing enterprise Identity & Access Management (IAM) solutions.
• Strong knowledge of Universal Directory, Profile Editor, Group Rules, Authentication Policies, and Lifecycle Management.
• Experience designing Identity Governance solutions, including Access Requests, Access Certifications, Entitlement Management, and approval workflows.
• Strong understanding of SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), SCIM, and federation concepts.
• Experience designing Org2Org federation and enterprise SSO architectures.
• Knowledge of Infrastructure as Code (Terraform) and CI/CD deployment practices for Okta is preferred.
• Strong understanding of enterprise security principles, Zero Trust architecture, RBAC, SoD, and identity governance best practices.
• Experience integrating external HR systems and enterprise applications with Okta.
• Excellent stakeholder management, solution design, documentation, and technical leadership skills.