Identity Architect (IAM / Okta)

Zappsec Inc.; New York (NY); A distancia; USD 150.000 - 185.000; Jornada completa

Descripción de la vacante

Zappsec Technologies Inc. invites an Identity Architect to lead enterprise identity modernization. You will design the target-state identity platform on Okta, govern access, and sequence complex migrations with multiple workstreams.

This client-facing role requires presenting designs to senior stakeholders and ensuring secure, scalable identity across the organization. Lead the replacement of legacy IAM, orchestrate JML workflows, and integrate Okta with AD/Entra ecosystems while maintaining

Formación

• 10+ years in identity and access management with focus on large-scale deployments.
• Hands-on Okta experience at enterprise scale and governance capabilities.
• Strong knowledge of SAML, OIDC, OAuth and SCIM standards.

Responsabilidades

• Define target-state identity architecture on Okta for workforce.
• Lead client-facing architecture discussions with executives and engineers.
• Oversee migration sequencing across multiple workstreams and tooling.
• Design joiner/mover/leaver automation using Okta workflows and HR data.
• Evaluate and replace legacy IAM platforms such as MIM.

Conocimientos

Okta at scale

Identity Governance

Okta Workflows

SAML 2.0

OIDC

AD and LDAP

Hybrid identity

MIM replacement

Descripción del empleo

Identity Architect (IAM / Okta)Job Description

Company

Zappsec Technologies Inc.

Practice

Identity

Employment Type

Full-time

Location

Remote

About Zappsec

Zappsec is an intelligent infrastructure consultancy. We deliver security, network, cloud, and identity as an integrated platform for enterprise clients across North America.

About the Role

We are hiring an Identity Architect to lead the design of a large-scale enterprise identity modernization program. The program consolidates workforce identity onto Okta and retires legacy identity infrastructure. You will own the target-state architecture and guide a delivery team of workstream leads and engineers. This is a client-facing role. You will present designs to senior stakeholders, defend architectural decisions, and sequence a complex migration across multiple parallel workstreams.

What You Will Do

• Define the target-state workforce identity architecture on Okta, covering SSO, MFA, and adaptive access
• Design the identity governance model on Okta Identity Governance, including access requests and certification campaigns
• Architect joiner, mover, and leaver (JML) lifecycle automation using Okta Workflows, driven by the HR system of record
• Lead the replacement strategy for Microsoft Identity Manager (MIM), including provisioning logic and data flows
• Define the migration approach for SAML and OIDC applications moving onto Okta
• Design the modernization path for legacy LDAP directories and RADIUS-based authentication
• Set the integration pattern between Okta, Active Directory, and Entra ID, with Entra scoped to Microsoft 365 use cases
• Produce and maintain architecture deliverables: high-level designs, low-level designs, and migration sequencing plans
• Review engineering work for alignment with the target architecture
• Identify design risks early and bring options to client stakeholders with a clear recommendation

What You Bring

• 10+ years in identity and access management, with 5+ years architecting Okta at enterprise scale
• Deep knowledge of Okta Workforce Identity, Okta Identity Governance, and Okta Workflows
• Hands-on history with federation protocols: SAML 2.0, OIDC, OAuth 2.0, and SCIM
• Experience decommissioning or replacing legacy IAM platforms such as MIM
• Working knowledge of Active Directory, LDAP directory services, and RADIUS authentication
• Understanding of hybrid identity models where AD remains a dependency alongside a cloud identity platform
• A record of leading identity workstreams on multi-month enterprise programs
• Strong written design documentation and the ability to explain trade-offs to executives and engineers alike

Nice to Have

• Okta certifications (Okta Certified Consultant, Okta Certified Professional, or equivalent)
• Experience with HR-driven provisioning integrations
• Prior consulting or professional services delivery experience
• Exposure to identity governance migrations from legacy IGA or homegrown tooling