Okta Architect (Contract)

KeyData Cyber; United States; Remote; USD 68,000 - 74,000; Full time

Job summary

KeyData Cyber is seeking an experienced Okta Architect to join our Delivery team in Canada on a remote 6-month contract. You will lead the design and implementation of secure, scalable identity solutions across enterprise environments, aligning business requirements with architecture and execution.

As a trusted advisor, you will drive IAM roadmaps, oversee Okta integrations with apps and APIs, and mentor delivery teams while upholding GDPR, SOC 2, and ISO 27001 standards in client engagements.

Qualifications

• 10+ years of experience in Identity & Access Management (IAM) with enterprise focus.
• Proven track record architecting and delivering Okta-based IAM at scale.
• Deep knowledge of OAuth 2.0, OIDC, SAML, and modern authentication patterns.
• Hands-on with Okta APIs, automation, and integration with web/mobile apps.

Responsibilities

• Lead architecture, design and implementation of Okta solutions for enterprise environments.
• Define end-to-end IAM architectures including authentication, authorization and user lifecycle.
• Implement SSO, MFA, passwordless and adaptive authentication using Okta.
• Design secure identity journeys and optimize user experiences across web, mobile, and API apps.
• Deliver POCs, gather requirements, and translate business needs into technical solutions.
• Mentor delivery teams and client stakeholders on architecture best practices.

Skills

IAM Architecture

Okta

OAuth 2.0

OIDC

SAML

RBAC

Security Compliance

Solution Design

Client Engagement

Java/JS

Tools

Okta

Okta Workflows

Terraform

Job description

At KeyData Cyber, we’re shaping the future of identity security. Recognized by Gartner and KuppingerCole as a leading IAM professional services firm, we specialize exclusively in designing, deploying, and managing end-to-end Identity and Access Management programs for organizations across North America.

With 20years of experience, 50M+ identities managed, and 1,000+ successful deployments, our team is our strongest asset and is built by design to help clients protect critical infrastructure, enable digital transformation, and ensure compliance with confidence.

We deliver comprehensive solutions across IAM domains, including:

• Workforce IAM (Access Management, Identity Governance and Administration, Privileged Access Management)
• Consumer IAM (Identity Verification, Authentication and Access, Threat Detection) in highly regulated industries.

If you’re ready to grow your career alongside some of the industry’s best, come join us — you’re key to our success

We are currently looking for an experienced Okta Architect to join our Delivery team. In this role, you will lead the design and implementation of secure, scalable identity solutions across enterprise environments, helping clients modernize their IAM landscape and strengthen their security posture. You will act as a strategic advisor and technical leader, bridging business requirements with architecture and execution, ensuring Okta-based IAM solutions are effectively designed, integrated, and optimized for enterprise environments.

Location: Canada

Employment type: Contract - 6 months, Remote

Vacancy Status: Immediate Opening: This position is currently available, and hiring is underway.

What You’ll Do

• Lead the architecture, design, and implementation of Okta solutions.
• Design end-to-end Identity and Access Management (IAM) architectures, including authentication, authorization, account recovery, and user lifecycle management.
• Architect and implement Single Sign-On (SSO), Multi-Factor Authentication (MFA), passwordless authentication, and adaptive authentication solutions using Okta.
• Design secure identity journeys and optimize user experiences across web, mobile, and API-driven applications.
• Conduct discovery workshops, gather requirements, define solution architectures, and deliver Proofs of Concepts (POCs) for complex IAM use cases.
• Design and implement Role-Based Access Control (RBAC), fine-grained authorization models, and policy-driven access controls.
• Lead integrations with applications and APIs using OAuth 2.0, OpenID Connect (OIDC), SAML, SCIM, and REST APIs.
• Drive automation, extensibility, and operational efficiency through Okta Workflows, APIs, and custom development.
• Provide technical leadership, architecture guidance, and mentorship to delivery teams and client stakeholders.
• Ensure solutions align with security best practices, privacy requirements, and compliance frameworks such as GDPR, SOC 2, and ISO 27001.
• Develop architecture standards, implementation patterns, technical documentation, and reusable accelerators.
• Troubleshoot complex authentication, authorization, federation, and identity lifecycle challenges

Who We’re Looking For

• 10+ years of experience in Identity & Access Management (IAM), with deep expertise in enterprise IAM.
• Proven experience architecting and implementing Okta solutions at enterprise scale.
• Strong expertise in OAuth 2.0, OpenID Connect (OIDC), SAML, JWT, API security, and modern authentication patterns.
• Hands-on experience with Okta Universal Directory, Workflows, Lifecycle Management, MFA, Passwordless Authentication, and application integrations.
• Experience designing authentication, profile management, account recovery, and identity lifecycle workflows.
• Strong understanding of RBAC, authorization models, and identity governance.
• Experience integrating Okta with web, mobile, SaaS, and API ecosystems.
• Hands-on experience with Okta APIs, automation, custom development, and scripting.
• Experience delivering IAM solutions across the full software development lifecycle (SDLC).
• Strong understanding of security, privacy, and compliance requirements including GDPR, ISO 27001, and SOC 2.
• Technical background in JavaScript, Node.js, Java, or similar development technologies.
• Excellent client-facing communication, solution design, and consulting skills

Nice-to-Have Skills

• Okta Certified Professional or equivalent Okta certifications.
• Experience with identity governance and access management.
• Exposure to Identity Federation, B2B Identity, and multi-tenant identity architectures.
• Experience with API security platforms and Zero Trust security principles.
• Familiarity with cloud platforms such as AWS, Azure, or GCP.
• Knowledge of broader IAM technologies such as SailPoint, CyberArk, Ping Identity, or ForgeRock.
• Experience with Infrastructure as Code (Terraform) and CI/CD pipelines for Okta deployments. The hourly rate range for this position is $70–$77 CAD per hour. The final rate will be

Compensation

The hourly raterange for this position is $70–$77 CAD per hour. The final rate will be determined based on the candidate’s experience, overall fit for the role, and expected ramp-up time. This is a 6-month, full-time contract role, working 40 hours a week. At KeyData Cyber, we are committed to fair and competitive compensation. We regularly benchmark across positions, industries, sectors, and experience levels, ensuring our approach recognizes each person’s unique strengths, contributions, and the value they bring to the organization

Why You’ll Love Working Here

At KeyData Cyber, we put people first, valuing learning, growth, and work-life balance. We offer extensive opportunities to advance your career through leading digital identity projects across North America. Our culture is built on respect, inclusion, and equal opportunity for everyone.

Accessibility & Accommodations

If you require accommodation due to a disability at any time during the recruitment and/or assessment process, please contact Talent Acquisition, and we will make all reasonable efforts to accommodate your request.

Fraud Prevention & Identity Verification

We may use information provided during the application process to help prevent fraud and verify identity. These checks may be conducted automatically through trusted third‑party service providers as part of our standard application screening process.