Senior Identity Platform Architect: Okta, Entra ID & AD

Tyler Technologies; United States; On-site; USD 140,000 - 200,000; Full time

Job summary

Tyler Technologies seeks an experienced IAM Architect to own identity platforms including Okta, Entra ID, and Active Directory. You will architect identity lifecycles, build workflows, and enable secure authentication across enterprise applications.

The role covers SSO strategy, access governance, and automation for Joiner/Mover/Leaver processes. Key duties include designing authentication policies, mentoring engineers, and leading remediation of directory hygiene.

Qualifications

• Minimum 5 years of IT experience with a meaningful portion in identity and access management in a mid-to-large enterprise.
• Hands-on experience with Okta Workforce Identity, Universal Directory, Lifecycle Management, Workflows, Access Gateway, Okta Identity Engine.
• Hands-on experience with Microsoft Entra ID — Conditional Access, app registrations, enterprise apps, PIM, B2B, hybrid join.
• Active Directory engineering across multi-domain/multi-forest environments, GPO, Sites & Services, ADFS, AD/Entra Connect, PowerShell.
• Experience with AWS IAM, IAM Identity Center, AWS Managed AD, and federation patterns.
• Production experience designing and operating SAML 2.0, OIDC/OAuth 2.0, SCIM 2.0, WS-Fed integrations.
• Experience automating identity lifecycle (Joiner/Mover/Leaver) from HRIS source.
• Strong scripting/automation: PowerShell (required) and Python/JavaScript/Terraform/JSON.
• Experience with MFA platforms and modern authenticators (Okta Verify, MS Authenticator, FIDO2).
• Familiarity with compliance frameworks: NIST CSF, SOC 2, SOX, CJIS, FedRAMP.
• Excellent written and verbal communication and documentation discipline.
• Working knowledge of Windows, Linux and macOS.
• Some travel is required.
• Fingerprint background check clearance for CJIS requirements.

Responsibilities

• Serve as the technical owner and SME for Okta, Entra ID, and AD.
• Architect and operate identity lifecycle pipelines (UKG → Okta → AD).
• Design and build Okta Workflows for Joiner/Mover/Leaver automation.
• Engineer bridges for non-native integrations (Lambda, Azure Functions).
• Own SSO strategy, onboarding standards, and Okta catalog.
• Design and maintain authentication and access policies (MFA, adaptive risk).
• Lead AD hygiene: stale accounts, group hygiene, GPO reviews, SPN management.
• Build identity dashboards across AD/Okta/Entra for visibility.
• Maintain non-production tenants for testing and rehearsal.
• Mentor IT Analysts and Engineers across Okta/Entra/AD.
• Participate in Agile/Scrumban ceremonies using JSM/Jira.
• Document architecture diagrams, runbooks, SOPs, training paths.
• Participate in IT projects, changes, incidents and on-call rotation.

Skills

IAM architecture

Okta Workflows

Okta Workforce Identity

Okta Universal Directory

Okta Lifecycle Management

Okta AD Agent write-back

Microsoft Entra ID

Conditional Access

Active Directory engineering

PowerShell

Scripting: Python/JavaScript/TF/JSON

MFA platforms

Compliance frameworks (NIST SOC2 SOX)

Documentation & communication

Cross-platform (Windows/Linux/macOS)

Travel readiness

Education

Okta Certified Professional / Administrator / Architect

Microsoft SC-300 — Identity & Access Administrator Associate

Microsoft AZ-500 — Azure Security Engineer

Microsoft AZ-800 / AZ-801 — Windows Server Hybrid Administrator

AWS Certified Security – Specialty

CISSP / SANS GIAC (GCIA / GCIH / GPCS) or equivalent

Tools

AD/Entra Connect

AWS IAM Identity Center

Job description

Tyler Technologies seeks an experienced IAM Architect to own identity platforms including Okta, Entra ID, and Active Directory. You will architect identity lifecycles, build workflows, and enable secure authentication across enterprise applications.

The role covers SSO strategy, access governance, and automation for Joiner/Mover/Leaver processes. Key duties include designing authentication policies, mentoring engineers, and leading remediation of directory hygiene.