> Markdown version of [/jobs/ext/4232473-identity-architect-iam-okta](https://www.wearedevelopers.com/jobs/ext/4232473-identity-architect-iam-okta). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Identity Architect (IAM / Okta) - **Company:** Performanx Specialty Chemicals, LLC - **Location:** United States (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Active Directory, High-Level Architecture, Identity and Access Management, Lightweight Directory Access Protocols (LDAP), OAuth, OpenID, Software Architecture, Security Assertion Markup Language (SAML), Data Streaming, Okta, HR Software - **Published:** October 18, 2026 - **Apply:** https://www.careerbuilder.com/job-details/identity-architect-iam-okta--7be958b4-917d-4589-8848-00d61b2b7ee1 ## About the Role * 10+ years in identity and access management, with 5+ years architecting Okta at enterprise scale * Deep knowledge of Okta Workforce Identity, Okta Identity Governance, and Okta Workflows * Hands-on history with federation protocols: SAML 2.0, OIDC, OAuth 2.0, and SCIM * Experience decommissioning or replacing legacy IAM platforms such as MIM * Working knowledge of Active Directory, LDAP directory services, and RADIUS authentication * Understanding of hybrid identity models where AD remains a dependency alongside a cloud identity platform * A record of leading identity workstreams on multi-month enterprise programs * Strong written design documentation and the ability to explain trade-offs to executives and engineers alike, * Okta certifications (Okta Certified Consultant, Okta Certified Professional, or equivalent) * Experience with HR-driven provisioning integrations * Prior consulting or professional services delivery experience * Exposure to identity governance migrations from legacy IGA or homegrown tooling ## Description Identity Architect (IAM / Okta)Job DescriptionCompanyZappsec Technologies Inc.PracticeIdentityEmployment TypeFull-timeLocationRemote About ZappsecZappsec is an intelligent infrastructure consultancy. We deliver security, network, cloud, and identity as an integrated platform for enterprise clients across North America.About the RoleWe are hiring an Identity Architect to lead the design of a large-scale enterprise identity modernization program. The program consolidates workforce identity onto Okta and retires legacy identity infrastructure. You will own the target-state architecture and guide a delivery team of workstream leads and engineers.This is a client-facing role. You will present designs to senior stakeholders, defend architectural decisions, and sequence a complex migration across multiple parallel workstreams.What You Will DoDefine the target-state workforce identity architecture on Okta, covering SSO, MFA, and adaptive accessDesign the identity governance model on Okta Identity Governance, including access requests and certification campaignsArchitect joiner, mover, and leaver (JML) lifecycle automation using Okta Workflows, driven by the HR system of recordLead the replacement strategy for Microsoft Identity Manager (MIM), including provisioning logic and data flowsDefine the migration approach for SAML and OIDC applications moving onto OktaDesign the modernization path for legacy LDAP directories and RADIUS-based authenticationSet the integration pattern between Okta, Active Directory, and Entra ID, with Entra scoped to Microsoft 365 use casesProduce and maintain architecture deliverables: high-level designs, low-level designs, and migration sequencing plansReview engineering work for alignment with the target architectureIdentify design risks early and bring options to client stakeholders with a clear recommendationWhat You Bring10+ years in identity and access management, with 5+ years architecting Okta at enterprise scaleDeep knowledge of Okta Workforce Identity, Okta Identity Governance, and Okta WorkflowsHands-on history with federation protocols: SAML 2.0, OIDC, OAuth 2.0, and SCIMExperience decommissioning or replacing legacy IAM platforms such as MIMWorking knowledge of Active Directory, LDAP directory services, and RADIUS authenticationUnderstanding of hybrid identity models where AD remains a dependency alongside a cloud identity platformA record of leading identity workstreams on multi-month enterprise programsStrong written design documentation and the ability to explain trade-offs to executives and engineers alikeNice to HaveOkta certifications (Okta Certified Consultant, Okta Certified Professional, or equivalent)Experience with HR-driven provisioning integrationsPrior consulting or professional services delivery experienceExposure to identity governance migrations from legacy IGA or homegrown toolingHow to ApplySend your resume and a short note on the largest Okta program you have architected to mukul.verma@zappsec.com Powered by JazzHR About Zappsec About the Role What You Will Do What You Bring Nice to Have How to Apply