Global Identity Architect

This role will play a key part in building out a modern identity platform that supports multiple business units and brands worldwide. You’ll be responsible for designing and implementing integrations between core directory services, SaaS providers, and business systems, ensuring compliance, security, and operational excellence.

• Architect and configure Okta Identity Cloud for SSO, MFA, provisioning, and automation integrations.
• Oversee hybrid identity synchronization between on-prem directories and cloud environments.
• Serve as the technical authority for enterprise identity architecture across Okta, Microsoft Entra ID, and Active Directory environments.
• Define security baselines and ensure identity solutions comply with frameworks such as SOX, PCI DSS, and NIST.
• Provide architecture documentation, standards, and guidance for engineers and implementation partners.
• Establish governance and automation models for identity lifecycle management, access reviews, and compliance reporting.
• Develop and maintain automated workflows for joiner/mover/leaver processes leveraging Workday, Okta Workflows, and related tools.
• Lead large-scale identity migrations and integrations resulting from mergers, acquisitions, or divestitures, ensuring secure transitions across multiple tenants and domains.
• Design and deploy directory and authentication frameworks that meet enterprise standards for scalability, performance, and cybersecurity.
• Partner with Infrastructure, Security, and Application teams to ensure smooth integration and service delivery across platforms.

• Strong execution mindset — able to drive delivery independently and with vendors.
• Proven ability to design and lead enterprise identity architectures across hybrid environments.
• Comfortable operating in evolving, fast-paced environments with changing priorities.
• Deep understanding of authentication, federation, and provisioning protocols (SAML, OIDC, OAuth, SCIM).
• Relevant certifications such as:
• Exceptional documentation and communication skills for both technical and non-technical audiences.
• Excellent analytical and problem-solving skills with an ability to handle complex migration scenarios.
• Microsoft Entra ID (Azure AD) (hybrid join, conditional access, identity federation)
• CISSP or GIAC (IAM / GRC focus)
• Training or certification in Zero Trust Architecture or IAM Governance
• Experience with identity migrations during organizational restructuring or M&A.
• Experience supporting identity initiatives in regulated environments (SOX, PCI DSS, or NIST).
• Bachelor’s degree in Computer Science, Information Systems, or equivalent professional experience.
• Okta Identity Cloud (SSO, MFA, Lifecycle Management, Identity Governance)
• 8+ years of experience in Identity and Access Management (IAM) or enterprise infrastructure design.
• Experience building automated identity lifecycle solutions integrated with HR and cloud systems.
• Microsoft Certified: Azure Solutions Architect Expert
• Microsoft Active Directory (forest/domain design, GPOs, trusts, replication)
• Leadership ability with a focus on mentorship, collaboration, and cross-functional influence.
• Proven success deploying greenfield identity environments and integrating with HR systems like Workday.
• Microsoft Certified: Identity and Access Administrator (SC-300)
• Background in PAM, PIM, or phishing-resistant MFA implementations.
• Demonstrated leadership experience designing and implementing IAM systems across cloud and on-prem environments.