Okta Architect

At KeyData Cyber, we’re shaping the future of identity security. Recognized by Gartner and KuppingerCole as a leading IAM professional services firm, we specialize exclusively in designing, deploying, and managing end-to-end Identity and Access Management programs for organizations across North America. With 20 years of experience, 50M+ identities managed, and 1,000+ successful deployments, our team is our strongest asset.

Proud to be recognized as a Culture 100 Award winner, KeyData Cyber is committed to building a workplace where people feel valued, supported, and empowered to grow. Our culture is rooted in collaboration, innovation, and continuous learning, creating opportunities for our people to thrive and make a meaningful impact.

Join an award-winning team where your ideas matter, your growth is supported, and your contributions make a difference.

We are currently looking for an experienced Okta Architect to join our Delivery team. In this role, you will lead the design and implementation of secure, scalable identity solutions across enterprise environments, helping clients modernize their IAM landscape and strengthen their security posture. You will act as a strategic advisor and technical leader, bridging business requirements with architecture and execution, ensuring Okta-based IAM solutions are effectively designed, integrated, and optimized for enterprise environments.

Location: Canada

Employment type: Contract - 6 months, Remote

Vacancy Status: Immediate Opening: This position is currently available, and hiring is underway.

What You'll Do

• Lead the architecture, design, and implementation of Okta solutions.
• Design end-to-end Identity and Access Management (IAM) architectures, including authentication, authorization, account recovery, and user lifecycle management.
• Architect and implement Single Sign-On (SSO), Multi-Factor Authentication (MFA), passwordless authentication, and adaptive authentication solutions using Okta.
• Design secure identity journeys and optimize user experiences across web, mobile, and API-driven applications.
• Conduct discovery workshops, gather requirements, define solution architectures, and deliver Proofs of Concepts (POCs) for complex IAM use cases.
• Design and implement Role-Based Access Control (RBAC), fine-grained authorization models, and policy-driven access controls.
• Lead integrations with applications and APIs using OAuth 2.0, OpenID Connect (OIDC), SAML, SCIM, and REST APIs.
• Drive automation, extensibility, and operational efficiency through Okta Workflows, APIs, and custom development.
• Provide technical leadership, architecture guidance, and mentorship to delivery teams and client stakeholders.
• Ensure solutions align with security best practices, privacy requirements, and compliance frameworks such as GDPR, SOC 2, and ISO 27001.
• Develop architecture standards, implementation patterns, technical documentation, and reusable accelerators.
• Troubleshoot complex authentication, authorization, federation, and identity lifecycle challenges

Who We're Looking For

• 10+ years of experience in Identity & Access Management (IAM), with deep expertise in enterprise IAM.
• Proven experience architecting and implementing Okta solutions at enterprise scale.
• Strong expertise in OAuth 2.0, OpenID Connect (OIDC), SAML, JWT, API security, and modern authentication patterns.
• Hands-on experience with Okta Universal Directory, Workflows, Lifecycle Management, MFA, Passwordless Authentication, and application integrations.
• Experience designing authentication, profile management, account recovery, and identity lifecycle workflows.
• Strong understanding of RBAC, authorization models, and identity governance.
• Experience integrating Okta with web, mobile, SaaS, and API ecosystems.
• Hands-on experience with Okta APIs, automation, custom development, and scripting.
• Experience delivering IAM solutions across the full software development lifecycle (SDLC).
• Strong understanding of security, privacy, and compliance requirements including GDPR, ISO 27001, and SOC 2.
• Technical background in JavaScript, Node.js, Java, or similar development technologies.
• Excellent client-facing communication, solution design, and consulting skills

Nice-to-Have Skills

• Okta Certified Professional or equivalent Okta certifications.
• Experience with identity governance and access management.
• Exposure to Identity Federation, B2B Identity, and multi-tenant identity architectures.
• Experience with API security platforms and Zero Trust security principles.
• Familiarity with cloud platforms such as AWS, Azure, or GCP.
• Knowledge of broader IAM technologies such as SailPoint, CyberArk, Ping Identity, or ForgeRock.
• Experience with Infrastructure as Code (Terraform) and CI/CD pipelines for Okta deployments.

Compensation: The base salary range for this position is CAD $85,000 – $100,000. The final base salary offered will be determined based on the candidate’s experience, overall fit for the role, and expected ramp-up time. Eligible individuals may also participate in our bonus program. At KeyData Cyber, we are committed to fair and competitive compensation. We regularly benchmark across positions, industries, sectors, and experience levels, ensuring our approach recognizes each person’s unique strengths, contributions, and the value they bring to the organization.

Why You’ll Love Working Here

At KeyData Cyber, we put people first, valuing learning, growth, and work-life balance. We offer extensive opportunities to advance your career through leading digital identity projects across North America. Our culture is built on respect, inclusion, and equal opportunity for everyone.

Accessibility & Accommodations

If you require accommodation due to a disability at any time during the recruitment and/or assessment process, please contact Talent Acquisition , and we will make all reasonable efforts to accommodate your request.

Fraud Prevention & Identity Verification

We may use information provided during the application process to help prevent fraud and verify identity. These checks may be conducted automatically through trusted third‑party service providers as part of our standard application screening process.

Apply now to join the KeyData Cyber team and be part of our mission to secure the future of digital identity across North America.