Identity Architect (IAM / Okta)

Zappsec; Northern (KY); Hybrid; USD 120,000 - 160,000; Full time

Job summary

Zappsec Technologies Inc. is seeking an Identity Architect to lead enterprise-grade identity modernization, consolidating workforce identity on Okta and retiring legacy IAM. You will own the target-state architecture and guide a delivery team through complex migrations across multiple workstreams.

This client-facing role requires presenting designs to senior stakeholders, defending architectural decisions, and sequencing migration paths while aligning with the modern identity strategy.

Qualifications

• 10+ years in identity and access management.
• 5+ years architecting Okta at enterprise scale.
• Experience presenting to executives and guiding multi-workstream migrations.

Responsibilities

• Define the target-state workforce identity architecture on Okta including SSO, MFA, and adaptive access.
• Design the identity governance model on Okta Identity Governance, including access requests and certification campaigns.
• Architect JML lifecycle automation using Okta Workflows driven by HR records.
• Lead the replacement strategy for Microsoft Identity Manager (MIM) including provisioning logic and data flows.
• Define migration approach for SAML and OIDC apps moving onto Okta.
• Design modernization for legacy LDAP directories and RADIUS-based authentication.
• Set integration patterns between Okta, AD, and Entra ID for Microsoft 365 use cases.
• Produce and maintain architecture deliverables: high-level/low-level designs and migration plans.

Skills

IAM expertise

Okta architecture

Enterprise design

SAML 2.0

Tools

Okta

Active Directory

LDAP

RADIUS

Job description

Identity Architect (IAM / Okta)

Job Description

• Company: Zappsec Technologies Inc.
• Practice: Identity
• Employment Type: Full-time
• Location: Remote

About Zappsec

Zappsec is an intelligent infrastructure consultancy. We deliver security, network, cloud, and identity as an integrated platform for enterprise clients across North America.

About the Role

We are hiring an Identity Architect to lead the design of a large-scale enterprise identity modernization program. The program consolidates workforce identity onto Okta and retires legacy identity infrastructure. You will own the target-state architecture and guide a delivery team of workstream leads and engineers.

This is a client-facing role. You will present designs to senior stakeholders, defend architectural decisions, and sequence a complex migration across multiple parallel workstreams.

What You Will Do

• Define the target-state workforce identity architecture on Okta, covering SSO, MFA, and adaptive access
• Design the identity governance model on Okta Identity Governance, including access requests and certification campaigns
• Architect joiner, mover, and leaver (JML) lifecycle automation using Okta Workflows, driven by the HR system of record
• Lead the replacement strategy for Microsoft Identity Manager (MIM), including provisioning logic and data flows
• Define the migration approach for SAML and OIDC applications moving onto Okta
• Design the modernization path for legacy LDAP directories and RADIUS-based authentication
• Set the integration pattern between Okta, Active Directory, and Entra ID, with Entra scoped to Microsoft 365 use cases
• Produce and maintain architecture deliverables: high-level designs, low-level designs, and migration sequencing plans
• Review engineering work for alignment with the target architecture
• Identify design risks early and bring options to client stakeholders with a clear recommendation

What You Bring

• 10+ years in identity and access management, with 5+ years architecting Okta at enterprise scale
• Deep knowledge of Okta Workforce Identity, Okta Identity Governance, and Okta Workflows
• Hands-on history with federation protocols: SAML 2.0, OIDC, OAuth 2.0, and SCIM
• Experience decommissioning or replacing legacy IAM platforms such as MIM
• Working knowledge of Active Directory, LDAP directory services, and RADIUS authentication
• Understanding of hybrid identity models where AD remains a dependency alongside a cloud identity platform
• A record of leading identity workstreams on multi-month enterprise programs
• Strong written design documentation and the ability to explain trade-offs to executives and engineers alike

Nice to Have

• Okta certifications (Okta Certified Consultant, Okta Certified Professional, or equivalent)
• Experience with HR-driven provisioning integrations
• Prior consulting or professional services delivery experience
• Exposure to identity governance migrations from legacy IGA or homegrown tooling