Okta Solution Architect

Quess IT Solutions; Bengaluru; Hybrid; INR 1,500,000 - 2,300,000; Full time

Job summary

Quess IT Solutions is seeking a Senior IAM Engineer to implement and support the Okta Customer Identity Solutions (CIS) platform in Bengaluru. You will work with the Solutions Architect to implement design, configure Okta Identity Cloud and Governance capabilities, and develop automations via Okta Workflows.

You will mentor junior engineers, participate in design reviews, and ensure alignment with enterprise security standards and IAM best practices.

Qualifications

• Hands-on experience with Okta Identity Cloud, Lifecycle Management and Identity Governance (OIG).
• Extensive experience configuring Okta Workflows and building reusable automation.
• Experience developing custom connectors using Java, Python, Okta SDKs and REST APIs.

Responsibilities

• Configure and administer Okta Universal Directory, user profile schema, and profile mappings.
• Implement JML processes using onboarding, CSV imports, and HR integrations.
• Configure authentication, sign-on, MFA, password policies and security controls.
• Develop and maintain Okta Workflows for lifecycle automation and approvals.
• Build reusable custom connectors using Java, Python, Okta SDKs and REST APIs.
• Configure Okta Identity Governance capabilities including Access Requests and Certifications.
• Integrate enterprise apps with Okta using SAML, OIDC, OAuth 2.0, and SCIM.
• Configure and manage Org2Org federation, IdPs, and trust relationships.
• Configure Event Hooks, Inline Hooks, and external API integrations.
• Collaborate in design discussions and solution reviews; support deployment and runbooks.
• Mentor junior engineers and perform technical reviews; produce documentation.

Skills

Okta Identity Cloud

Okta Lifecycle Management

Okta Identity Governance (OIG)

Okta Workflows

Java

Python

REST APIs

SAML

OIDC

OAuth 2.0

SCIM

Terraform

CI/CD practices

RBAC IAM security

Troubleshooting

Communication skills

Tools

Okta SDKs

Job description

Role & responsibilities

Role Overview

The Senior IAM Engineer Okta will be responsible for the technical implementation, configuration, and support of the Okta Customer Identity Solutions (CIS) platform. This role will work closely with the Solutions Architect to implement the approved solution design, configure Okta Identity Cloud and Identity Governance capabilities, develop automation using Okta Workflows, integrate enterprise applications, and ensure successful delivery of the identity platform.

The Senior IAM Engineer will also provide technical guidance to junior engineers, participate in design discussions, and ensure implementation aligns with enterprise architecture, security standards, and IAM best practices.

Key Responsibilities

• Configure and administer Okta Universal Directory, user profile schema, and profile mappings.
• Implement Joiner, Mover, and Leaver (JML) processes using manual onboarding, CSV imports, and future HR integrations.
• Configure authentication policies, sign-on policies, MFA policies, password policies, and security controls.
• Develop and maintain Okta Workflows for lifecycle automation, notifications, approvals, and operational processes.
• Build reusable custom connectors using Java, Python, Okta SDKs & Okta Workflows where required.
• Configure Okta Identity Governance (OIG) capabilities, including:
• Access Requests ,Resource Catalogs ,Access Certifications ,Approval & Reviewer Chains
• Integrate enterprise applications with Okta using SAML, OIDC, OAuth 2.0, and SCIM where applicable.
• Configure and manage Org2Org federation, Identity Providers (IdPs), and trust relationships.
• Configure Event Hooks, Inline Hooks, and external API integrations.
• Participate in discovery workshops, technical design discussions, and solution reviews with the Solutions Architect.
• Develop deployment packages and support configuration promotion between Preview and Production environments.
• Execute unit testing, integration testing, support SIT/UAT activities, and resolve implementation issues.
• Mentor junior engineers and perform technical reviews to ensure implementation quality.
• Produce technical documentation, implementation guides, operational runbooks, and knowledge transfer documentation.
• Support production deployment, Hypercare activities, and operational handover.

Required Skills & Experience

• Strong hands-on experience with Okta Identity Cloud, Okta Lifecycle Management, and Okta Identity Governance (OIG).
• Extensive experience configuring Okta Workflows and building reusable automation.
• Experience developing custom connectors using Java, Python, Okta SDKs, and REST APIs.
• Strong understanding of Universal Directory, Profile Editor, Group Rules, and Identity Lifecycle Management.
• Experience integrating enterprise applications using SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and SCIM.
• Experience configuring Access Requests, Access Certifications, Resource Catalogs, and governance workflows within Okta Identity Governance.
• Strong knowledge of Org2Org Federation, Identity Providers (IdPs), and federation concepts.
• Experience working with Event Hooks, Inline Hooks, and external REST APIs.
• Familiarity with Infrastructure as Code (Terraform) and CI/CD deployment practices is preferred.
• Strong understanding of authentication, authorization, RBAC, and IAM security best practices.
• Excellent troubleshooting, analytical, and problem-solving skills.
• Strong communication skills and the ability to collaborate effectively with architects, project teams, and business stakeholders.