Okta Solution Architect

Quess; Bengaluru; On-site; INR 2,000,000 - 3,000,000; Full time

Job summary

Quess is seeking a Senior IAM Engineer to lead the design, configuration, and support of the Okta-based Customer Identity Solutions (CIS) platform. You will implement the approved solution, configure identity services, and develop automations using Okta Workflows while integrating enterprise apps.

You will guide junior engineers, participate in architecture discussions, and ensure alignment with security standards and enterprise IAM practices.

Qualifications

• Strong hands-on experience with Okta Identity Cloud, Lifecycle Management, and Identity Governance (OIG)
• Extensive experience configuring Okta Workflows and building reusable automation
• Experience developing custom connectors using Java, Python, Okta SDKs, and REST APIs
• Strong understanding of Universal Directory, Profile Editor, Group Rules, and Identity Lifecycle Management
• Experience integrating applications using SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and SCIM
• Experience configuring Access Requests, Access Certifications, Resource Catalogs, and governance workflows within Okta Identity Governance
• Strong knowledge of Org2Org Federation, Identity Providers (IdPs) and federation concepts
• Experience with Event Hooks, Inline Hooks, and external REST APIs
• Familiarity with Infrastructure as Code (Terraform) and CI/CD deployment practices
• Strong understanding of authentication, authorization, RBAC, and IAM security best practices
• Excellent troubleshooting and communication skills

Responsibilities

• Configure and administer Okta Universal Directory, user profile schema, and profile mappings
• Implement Joiner, Mover, and Leaver (JML) processes using manual onboarding, CSV imports, and HR integrations
• Configure authentication policies, sign-on policies, MFA policies, password policies, and security controls
• Develop and maintain Okta Workflows for lifecycle automation, notifications, approvals, and operational processes
• Build reusable custom connectors using Java, Python, Okta SDKs & Okta Workflows
• Configure Okta Identity Governance capabilities (Access Requests, Resource Catalogs, Access Certifications, Approval & Reviewer Chains)
• Integrate enterprise applications with Okta using SAML, OIDC, OAuth 2.0, and SCIM
• Configure Org2Org federation, IdPs, and trust relationships
• Configure Event Hooks, Inline Hooks, and external API integrations
• Participate in discovery workshops and design discussions with Solutions Architect
• Develop deployment packages and promote configurations between Preview and Production
• Perform testing, SIT/UAT, and resolve implementation issues
• Mentor junior engineers and conduct technical reviews
• Produce technical docs, runbooks, and knowledge transfer materials
• Support production deployment, Hypercare, and handover

Skills

Okta Identity Cloud

Okta Workflows

Java

Python

REST APIs

SAML 2.0

OIDC

SCIM

Terraform

CI/CD

RBAC

IAM Security

Troubleshooting

Communication

Tools

Okta SDKs

Job description

Role & responsibilities

Role Overview

TheSenior IAM Engineer Oktawill be responsible for the technical implementation, configuration, and support of the Okta Customer Identity Solutions (CIS) platform. This role will work closely with the Solutions Architect to implement the approved solution design, configure Okta Identity Cloud and Identity Governance capabilities, develop automation using Okta Workflows, integrate enterprise applications, and ensure successful delivery of the identity platform.

The Senior IAM Engineer will also provide technical guidance to junior engineers, participate in design discussions, and ensure implementation aligns with enterprise architecture, security standards, and IAM best practices.

Key Responsibilities

• Configure and administer Okta Universal Directory, user profile schema, and profile mappings.


• Implement Joiner, Mover, and Leaver (JML) processes using manual onboarding, CSV imports, and future HR integrations.


• Configure authentication policies, sign-on policies, MFA policies, password policies, and security controls.


• Develop and maintain Okta Workflowsfor lifecycle automation, notifications, approvals, and operational processes.


• Build reusable custom connectors using Java, Python, Okta SDKs & Okta Workflows where required.


• Configure Okta Identity Governance (OIG) capabilities, including:


• Access Requests ,Resource Catalogs ,Access Certifications ,Approval & Reviewer Chains


• Integrate enterprise applications with Okta using SAML, OIDC, OAuth 2.0, and SCIM where applicable.


• Configure and manage Org2Org federation, Identity Providers (IdPs), and trust relationships.


• Configure Event Hooks, Inline Hooks, and external API integrations.


• Participate in discovery workshops, technical design discussions, and solution reviews with the Solutions Architect.


• Develop deployment packages and support configuration promotion between Preview and Production environments.


• Execute unit testing, integration testing, support SIT/UAT activities, and resolve implementation issues.


• Mentor junior engineers and perform technical reviews to ensure implementation quality.


• Produce technical documentation, implementation guides, operational runbooks, and knowledge transfer documentation.


• Support production deployment, Hypercare activities, and operational handover.

Required Skills & Experience

• Strong hands‑on experience with Okta Identity Cloud, Okta Lifecycle Management, and Okta Identity Governance (OIG).


• Extensive experience configuring Okta Workflows and building reusable automation.


• Experience developing custom connectors using Java, Python, Okta SDKs, and REST APIs.


• Strong understanding of Universal Directory, Profile Editor, Group Rules, and Identity Lifecycle Management.


• Experience integrating enterprise applications using SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and SCIM.


• Experience configuring Access Requests, Access Certifications, Resource Catalogs, and governance workflows within Okta Identity Governance.


• Strong knowledge of Org2Org Federation, Identity Providers (IdPs), and federation concepts.


• Experience working with Event Hooks, Inline Hooks, and external REST APIs.


• Familiarity with Infrastructure as Code (Terraform) and CI/CD deployment practices is preferred.


• Strong understanding of authentication, authorization, RBAC, and IAM security best practices.


• Excellent troubleshooting, analytical, and problem‑solving skills.


• Strong communication skills and the ability to collaborate effectively with architects, project teams, and business stakeholders.