Okta Architect (Contract)

We are currently looking for an experienced Okta Architect to join our Delivery team. In this role, you will lead the design and implementation of secure, scalable identity solutions across enterprise environments, helping clients modernize their IAM landscape and strengthen their security posture. You will act as a strategic advisor and technical leader, bridging business requirements with architecture and execution, ensuring Okta-based IAM solutions are effectively designed, integrated, and optimized for enterprise environments.

Location: Canada

Employment type: Contract - 6 months, Remote

Vacancy Status: Immediate Opening: This position is currently available, and hiring is underway.

What You'll Do

• Lead the architecture, design, and implementation of Okta solutions.
• Design end-to-end Identity and Access Management (IAM) architectures, including authentication, authorization, account recovery, and user lifecycle management.
• Architect and implement Single Sign-On (SSO), Multi-Factor Authentication (MFA), passwordless authentication, and adaptive authentication solutions using Okta.
• Design secure identity journeys and optimize user experiences across web, mobile, and API-driven applications.
• Conduct discovery workshops, gather requirements, define solution architectures, and deliver Proofs of Concepts (POCs) for complex IAM use cases.
• Design and implement Role-Based Access Control (RBAC), fine-grained authorization models, and policy-driven access controls.
• Lead integrations with applications and APIs using OAuth 2.0, OpenID Connect (OIDC), SAML, SCIM, and REST APIs.
• Drive automation, extensibility, and operational efficiency through Okta Workflows, APIs, and custom development.
• Provide technical leadership, architecture guidance, and mentorship to delivery teams and client stakeholders.
• Ensure solutions align with security best practices, privacy requirements, and compliance frameworks such as GDPR, SOC 2, and ISO 27001.
• Develop architecture standards, implementation patterns, technical documentation, and reusable accelerators.
• Troubleshoot complex authentication, authorization, federation, and identity lifecycle challenges

Who We're Looking For

• 10+ years of experience in Identity & Access Management (IAM), with deep expertise in enterprise IAM.
• Proven experience architecting and implementing Okta solutions at enterprise scale.
• Strong expertise in OAuth 2.0, OpenID Connect (OIDC), SAML, JWT, API security, and modern authentication patterns.
• Hands-on experience with Okta Universal Directory, Workflows, Lifecycle Management, MFA, Passwordless Authentication, and application integrations.
• Experience designing authentication, profile management, account recovery, and identity lifecycle workflows.
• Strong understanding of RBAC, authorization models, and identity governance.
• Experience integrating Okta with web, mobile, SaaS, and API ecosystems.
• Hands-on experience with Okta APIs, automation, custom development, and scripting.
• Experience delivering IAM solutions across the full software development lifecycle (SDLC).
• Strong understanding of security, privacy, and compliance requirements including GDPR, ISO 27001, and SOC 2.
• Technical background in JavaScript, Node.js, Java, or similar development technologies.
• Excellent client-facing communication, solution design, and consulting skills

Nice-to-Have Skills

• Okta Certified Professional or equivalent Okta certifications.
• Experience with identity governance and access management.
• Exposure to Identity Federation, B2B Identity, and multi-tenant identity architectures.
• Experience with API security platforms and Zero Trust security principles.
• Familiarity with cloud platforms such as AWS, Azure, or GCP.
• Knowledge of broader IAM technologies such as SailPoint, CyberArk, Ping Identity, or ForgeRock.
• Experience with Infrastructure as Code (Terraform) and CI/CD pipelines for Okta deployments. The hourly rate range for this position is $70–$77 CAD per hour. The final rate will be

Compensation: The hourly rate range for this position is $70–$77 CAD per hour. The final rate will be determined based on the candidate’s experience, overall fit for the role, and expected ramp-up time. This is a 6-month, full-time contract role, working 40 hours a week. At KeyData Cyber, we are committed to fair and competitive compensation. We regularly benchmark across positions, industries, sectors, and experience levels, ensuring our approach recognizes each person’s unique strengths, contributions, and the value they bring to the organization #LI-AS1